Source Pravda.Ru

QuickTime version 7.3.1 has another flaw

Thanks to Luigi Auriemma a new bug was traced down in a fully patched QuickTime version 7.3.1, running on Windows and Mac OS X.

The problem is a buffer-overflow which happens during the filling of the LCD-like screen containing info about the status of the connection. For exploiting this vulnerability is only needed that a user follows a rtsp:// link, if the port 554 of the server is closed Quicktime will automatically change the transport and will try the HTTP protocol on port 80, the 404 error message of the server (other error numbers are valid too) will be visualized in the LCD-like screen.

During Luigi Auriemma’s tests he has been able to fully overwrite the return address anyway note that the visible effects of the vulnerability could change during the usage of the debugger (in attaching mode it's everything ok).

For all users, it is recommended updating QuickTime 7.3.1.

The full information can be found at http://www.milw0rm.com/exploits/4885

Photo: www.carstenseiler.com

Russia convenes a meeting of the UN Security Council after Ukraine passed the law on the state language in Ukraine. Grigory Tarasenko, a blogger from Odessa, believes that Zelensky will suppress the resistance of the Russian-speaking population in Ukraine

Zelensky will continue extermination of Russians in Ukraine - blogger

Russia convenes a meeting of the UN Security Council after Ukraine passed the law on the state language in Ukraine. Grigory Tarasenko, a blogger from Odessa, believes that Zelensky will suppress the resistance of the Russian-speaking population in Ukraine

Zelensky will continue extermination of Russians in Ukraine - blogger

Russia convenes a meeting of the UN Security Council after Ukraine passed the law on the state language in Ukraine. Grigory Tarasenko, a blogger from Odessa, believes that Zelensky will suppress the resistance of the Russian-speaking population in Ukraine

Zelensky will continue extermination of Russians in Ukraine - blogger
Comments
Zelensky will continue extermination of Russians in Ukraine - blogger
What the Mueller report tells us about the post-truth era
Venezuela loses $130 billion because of US sanctions
Zelensky will continue extermination of Russians in Ukraine - blogger
Populism versus the Professional Politician
Russia's Black Sea Fleet to embrace vast waters to Red Sea and Persian Gulf
Populism versus the Professional Politician
Populism versus the Professional Politician
Populism versus the Professional Politician
Russia and NATO terminate cooperation in military and civil areas completely
Declaration of Florence: For an International Front NATO Exit
Venezuela loses $130 billion because of US sanctions
What the Mueller report tells us about the post-truth era
What the Mueller report tells us about the post-truth era
Venezuela loses $130 billion because of US sanctions
Zelensky will continue extermination of Russians in Ukraine - blogger
Zelensky will continue extermination of Russians in Ukraine - blogger
Russia's Black Sea Fleet to embrace vast waters to Red Sea and Persian Gulf
Zelensky will continue extermination of Russians in Ukraine - blogger
Populism versus the Professional Politician
Populism versus the Professional Politician