Apple Mac OS X QuickDraw Manager contains a buffer overflow that may allow a remote attacker to execute arbitrary code.
Apple Mac OS X QuickDraw is a 2D graphics library. It is used by several applications, including Safari, Mail, and Finder. QuickDraw is used to render PICT images on Mac systems. QuickDraw Manager contains an unspecified buffer overflow in the handling of PICT images.
By convincing a user to view a specially crafted PICT image (e.g., contained within a web page or an HTML email message), an attacker could execute arbitrary code with the privileges of the user. The attacker could also cause the application using the QuickDraw library to crash.
Apply an update
Please see Apple Security Update 2005-008 for details on workarounds, fixes, and updates.
529945
Filter by status: All Affected Not Affected Unknown
Filter by content: __ Additional information available
__ Sort by: Status Alphabetical
Expand all
Javascript is disabled. Click here to view vendors.
Updated: September 27, 2005
Affected
We have not received a statement from the vendor.
The vendor has not provided us with any further information regarding this vulnerability.
Please see Apple Security Update 2005-008 for details on workarounds, fixes, and updates.
If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23529945 Feedback>).
Group | Score | Vector |
---|---|---|
Base | ||
Temporal | ||
Environmental |
Thanks to Apple Product Security for reporting this vulnerability, who in turn credit Henrik Dalgaard of Echo One.
This document was written by Will Dormann.
CVE IDs: | CVE-2005-2744 |
---|---|
Severity Metric: | 28.69 Date Public: |
developer.apple.com/documentation/Carbon/Reference/QuickDraw_Ref/index.html
developer.apple.com/documentation/mac/QuickDraw/QuickDraw-333.html#HEADING333-29
docs.info.apple.com/article.html?artnum=302413
secunia.com/advisories/16920/
securitytracker.com/alerts/2005/Sep/1014961.html
www.auscert.org.au/5509
www.securityfocus.com/bid/14914
www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33420
xforce.iss.net/xforce/xfdb/22384