Apple QuickTime enof Atom Parsing Heap Buffer Overflow (CVE-2013-0986)

A remote code execution vulnerability has been reported in Apple QuickTime...

Apple QuickTime 'enof' atoms处理缓冲区溢出漏洞

Bugtraq ID:60086 CVE ID:CVE-2013-0986 Apple QuickTime是一款拥有强大的多媒体技术的内置媒体播放器。 Apple QuickTime处理包含特制'enof' atoms的电影文件时存在一个缓冲区溢出漏洞，允许远程攻击者利用漏洞构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码。 0 Apple QuickTime 7.7.4 厂商解决方案 Apple QuickTime 7.7.4已经修复此漏洞，建议用户下载更新： http://www.apple.com...

QuickTime < 7.7.4 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.7.4. It is, therefore, reportedly affected by the following vulnerabilities : - Buffer overflow vulnerabilities exist in the handling of 'dref' atoms, 'enof' atoms, 'mvhd' atoms, FPX files, MP3 files, H.263 and H.264...

CVE-2013-0986

Apple QuickTime prior to version 7.7.4 contains a buffer overflow vulnerability in the handling of enof atoms in movie files, potentially allowing remote code execution or a crash. Exploitation would require a crafted movie file delivered to a target system, with network access. Mitigation: apply...

QuickTime < 7.7.4 Multiple Vulnerabilities (Windows) (deprecated)

Binary data 6840.prm...