Source Pravda.Ru

QuickTime version 7.3.1 has another flaw

Thanks to Luigi Auriemma a new bug was traced down in a fully patched QuickTime version 7.3.1, running on Windows and Mac OS X.

The problem is a buffer-overflow which happens during the filling of the LCD-like screen containing info about the status of the connection. For exploiting this vulnerability is only needed that a user follows a rtsp:// link, if the port 554 of the server is closed Quicktime will automatically change the transport and will try the HTTP protocol on port 80, the 404 error message of the server (other error numbers are valid too) will be visualized in the LCD-like screen.

During Luigi Auriemma’s tests he has been able to fully overwrite the return address anyway note that the visible effects of the vulnerability could change during the usage of the debugger (in attaching mode it's everything ok).

For all users, it is recommended updating QuickTime 7.3.1.

The full information can be found at http://www.milw0rm.com/exploits/4885

Photo: www.carstenseiler.com

Comments
Putin dislikes the idea of US army bases coming to Kuril Islands
USA plays to pretend a mighty dragon that can no longer breathe fire
Brexit: The UK's misunderstanding of Democracy
Putin dislikes the idea of US army bases coming to Kuril Islands
Madrid, shame on you!
Brexit: The UK's misunderstanding of Democracy
Putin dislikes the idea of US army bases coming to Kuril Islands
Russians lose faith in their future, get ready for worse
Capital outflow from Russia sets new records
Malaysia complains of faulty Russian Sukhoi Su-30 fighter jets
Putin dislikes the idea of US army bases coming to Kuril Islands
Men's presence in maternity wards during childbirth considered shameful in Russia
Macron challenges Trump. French independence and croissants at stake
Russia’s sanctions against Ukraine send message to Washington
Russia sells arms to Asia to maintain peace in the world
The Amazon and the New Conquistadores
Putin's three days in Singapore mark Russia's major geopolitical changes since 2000
Castro sued over alleged torture
Macron challenges Trump. French independence and croissants at stake
Castro sued over alleged torture
Malaysia complains of faulty Russian Sukhoi Su-30 fighter jets