< Back to JetLib.com

jetlib.sec » Tags » audio-codec

« Expand/Collapse

4 items tagged "audio codec"

Related tags: code execution [+], apple quicktime [+], zero [+], sample [+], day [+], buffer overflow [+], vulnerability [+], quicktime apple [+], code [+], audio [+], apple lossless [+]

November 21, 2011
11:24
Apple Quicktime Apple Lossless Audio Codec Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code audio vulnerability apple-lossless apple-quicktime quicktime-apple audio-codec code-execution

August 16, 2011
14:12
Zero Day Initiative Advisory 11-258
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-258 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktime handles the Sample-to-Chunks table in media files with 'twos' audio codec. If a value for 'samples per chunk' is bigger than 8 times the sample rate from the 'Sample Description Atom' it will cause a buffer overflow during the parsing of the atom sample table. This can result in remote code execution under the context of the current user.
Tags: sample day zero apple-quicktime audio-codec code-execution buffer-overflow

14:12
Zero Day Initiative Advisory 11-258
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-258 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktime handles the Sample-to-Chunks table in media files with 'twos' audio codec. If a value for 'samples per chunk' is bigger than 8 times the sample rate from the 'Sample Description Atom' it will cause a buffer overflow during the parsing of the atom sample table. This can result in remote code execution under the context of the current user.
Tags: sample day zero apple-quicktime audio-codec code-execution buffer-overflow

14:12
Zero Day Initiative Advisory 11-258
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-258 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktime handles the Sample-to-Chunks table in media files with 'twos' audio codec. If a value for 'samples per chunk' is bigger than 8 times the sample rate from the 'Sample Description Atom' it will cause a buffer overflow during the parsing of the atom sample table. This can result in remote code execution under the context of the current user.
Tags: sample day zero apple-quicktime audio-codec code-execution buffer-overflow