< Back to JetLib.com

jetlib.sec » Tags » flc-delta

« Expand/Collapse

6 items tagged "flc delta"

Related tags: code execution [+], apple quicktime [+], zero [+], day [+], zero day [+], initiative [+], packet count [+], file [+], vulnerability [+], decompression code [+], decompression [+], code [+]

January 21, 2012
10:59
Apple QuickTime FLC Delta Decompression Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability decompression apple-quicktime flc-delta decompression-code code-execution

October 27, 2011
15:14
Zero Day Initiative Advisory 11-315
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-315 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktime decodes flic file. Flic files can contain FLC Delta Decompression block containing Run Length Encoded data. Quicktime fails to correctly checking the decompression size when decoding the RLE data. This allows for a 4 byte overwrite past the end of the buffer which could result into remote code execution under the context of the current user.
Tags: day zero initiative apple-quicktime flc-delta code-execution zero-day

15:14
Zero Day Initiative Advisory 11-315
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-315 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktime decodes flic file. Flic files can contain FLC Delta Decompression block containing Run Length Encoded data. Quicktime fails to correctly checking the decompression size when decoding the RLE data. This allows for a 4 byte overwrite past the end of the buffer which could result into remote code execution under the context of the current user.
Tags: day zero initiative apple-quicktime flc-delta code-execution zero-day

15:14
Zero Day Initiative Advisory 11-315
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-315 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktime decodes flic file. Flic files can contain FLC Delta Decompression block containing Run Length Encoded data. Quicktime fails to correctly checking the decompression size when decoding the RLE data. This allows for a 4 byte overwrite past the end of the buffer which could result into remote code execution under the context of the current user.
Tags: day zero initiative apple-quicktime flc-delta code-execution zero-day

15:11
Zero Day Initiative Advisory 11-313
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-313 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktime decodes flic file. Flic files can contain FLC Delta Decompression block containing Run Length Encoded data. When Quicktime tries to decompress this data it reads a user supplied RLE Packet count field from the file and uses that as loop counter. A high value for this field will cause Quicktime to write outside previously allocated memory which could result into remote code execution.
Tags: day zero file apple-quicktime flc-delta code-execution packet-count

15:11
Zero Day Initiative Advisory 11-313
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-313 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktime decodes flic file. Flic files can contain FLC Delta Decompression block containing Run Length Encoded data. When Quicktime tries to decompress this data it reads a user supplied RLE Packet count field from the file and uses that as loop counter. A high value for this field will cause Quicktime to write outside previously allocated memory which could result into remote code execution.
Tags: day zero file apple-quicktime flc-delta code-execution packet-count