Apple QuickTime 7.7.2 – Targa image Buffer Overflow

• Exploit Database
• 10 阅读

• 作者： Senator of Pirates
  日期： 2012-11-20
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/22855/

• *Application : Apple QuickTime
  Versions : <=before 7.7.3
  CVE : 2012-3755*
  *Impact : 9.3 (High)*
  *References* *:* *
  http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html*
  *Auther : Senator of Pirates*
  *E-Mail : SenatorofPirates.team[at]gmail.com
  FaceBook : /SenatorofPirates
  **/SenatorofPiratesInfo
  Greetz : To Morocco
  
  ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
  *
  
  *Vulnerability :
  
  A buffer overflow vulnerability in QuickTime PictureViewer.exe and the
  specific flaw exists within TGA file images encoded data, When encountering
  an invalid encoded width field and can be result a heap-based buffer
  overflow occur.
  And this vulnerability allows remote attackers to execute arbitrary code or
  cause a denial of service (application crash) via a crafted Targa image. *
  *
  PoC :
  
  http://www18.zippyshare.com/v/40547915/file.html
  https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/22855.tga
  
  *