Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2006-2238
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-2238

Description:
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted BMP file that triggers the overflow in the ReadBMP function. NOTE: this issue was originally included as item 3 in CVE-2006-1983, but it has been given a separate identifier because it is a distinct issue.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/26402

ST
  1016067

SAID
  Secunia Advisory: SA20069

OSVDB
  24820

MISC
  http://www.security-protocols.com/sp-x27-advisory.php

CERT
  http://www.us-cert.gov/cas/techalerts/TA06-132B.html

BID
  17953

APPLE
  http://lists.apple.com/archives/security-announce/2006/May/msg00002.html


Return to the previous page.