TUCoPS :: Macintosh :: bx2664.htm

TUCoPS :: Macintosh :: bx2664.htm
Apple QuickTime Run Length Encoding Heap Overflow Vulnerability
ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability

WkRJLTA4LTAxODogQXBwbGUgUXVpY2tUaW1lIFJ1biBMZW5ndGggRW5jb2RpbmcgSGVhcCBPdmVy
ZmxvdyANClZ1bG5lcmFiaWxpdHkNCmh0dHA6Ly93d3cuemVyb2RheWluaXRpYXRpdmUuY29tL2Fk
dmlzb3JpZXMvWkRJLTA4LTAxOA0KQXByaWwgMywgMjAwOA0KDQotLSBDVkUgSUQ6DQpDVkUtMjAw
OC0xMDIxDQoNCi0tIEFmZmVjdGVkIFZlbmRvcnM6DQpBcHBsZQ0KDQotLSBBZmZlY3RlZCBQcm9k
dWN0czoNCkFwcGxlIFF1aWNrdGltZSA3LjQuMQ0KDQotLSBUaXBwaW5nUG9pbnQoVE0pIElQUyBD
dXN0b21lciBQcm90ZWN0aW9uOg0KVGlwcGluZ1BvaW50IElQUyBjdXN0b21lcnMgaGF2ZSBiZWVu
IHByb3RlY3RlZCBhZ2FpbnN0IHRoaXMNCnZ1bG5lcmFiaWxpdHkgYnkgRGlnaXRhbCBWYWNjaW5l
IHByb3RlY3Rpb24gZmlsdGVyIElEIDU5OTguIA0KRm9yIGZ1cnRoZXIgcHJvZHVjdCBpbmZvcm1h
dGlvbiBvbiB0aGUgVGlwcGluZ1BvaW50IElQUywgdmlzaXQ6DQoNCiAgICBodHRwOi8vd3d3LnRp
cHBpbmdwb2ludC5jb20NCg0KLS0gVnVsbmVyYWJpbGl0eSBEZXRhaWxzOg0KVGhpcyB2dWxuZXJh
YmlsaXR5IGFsbG93cyBhdHRhY2tlcnMgdG8gZXhlY3V0ZSBhcmJpdHJhcnkgY29kZSBvbg0KdnVs
bmVyYWJsZSBpbnN0YWxsYXRpb25zIG9mIEFwcGxlIFF1aWNrVGltZSBQbGF5ZXIuIFVzZXIgaW50
ZXJhY3Rpb24gaXMNCnJlcXVpcmVkIHRvIGV4cGxvaXQgdGhpcyB2dWxuZXJhYmlsaXR5IGluIHRo
YXQgdGhlIHRhcmdldCBtdXN0IHZpc2l0IGENCm1hbGljaW91cyBwYWdlIG9yIG9wZW4gYSBtYWxp
Y2lvdXMgZmlsZS4NCg0KVGhlIHNwZWNpZmljIGZsYXcgZXhpc3RzIHdpdGhpbiB0aGUgcGFyc2lu
ZyBvZiBRdWlja1RpbWUgZmlsZXMgdGhhdA0KdXRpbGl6ZSB0aGUgQW5pbWF0aW9uIGNvZGVjLiBB
IGxhY2sgb2YgcHJvcGVyIGxlbmd0aCBjaGVja3MgY2FuIHJlc3VsdA0KaW4gYSBoZWFwIGJhc2Vk
IGJ1ZmZlciBvdmVyZmxvdyBsZWFkaW5nIHRvIGFyYml0cmFyeSBjb2RlIGV4ZWN1dGlvbg0KdW5k
ZXIgdGhlIGNvbnRleHQgb2YgdGhlIGN1cnJlbnRseSBsb2dnZWQgaW4gdXNlci4NCg0KLS0gVmVu
ZG9yIFJlc3BvbnNlOg0KQXBwbGUgaGFzIGlzc3VlZCBhbiB1cGRhdGUgdG8gY29ycmVjdCB0aGlz
IHZ1bG5lcmFiaWxpdHkuIE1vcmUNCmRldGFpbHMgY2FuIGJlIGZvdW5kIGF0Og0KDQpodHRwOi8v
c3VwcG9ydC5hcHBsZS5jb20va2IvSFQxMjQxDQoNCi0tIERpc2Nsb3N1cmUgVGltZWxpbmU6DQoy
MDA4LTAyLTA3IC0gVnVsbmVyYWJpbGl0eSByZXBvcnRlZCB0byB2ZW5kb3INCjIwMDgtMDQtMDMg
LSBDb29yZGluYXRlZCBwdWJsaWMgcmVsZWFzZSBvZiBhZHZpc29yeQ0KDQotLSBDcmVkaXQ6DQpU
aGlzIHZ1bG5lcmFiaWxpdHkgd2FzIGRpc2NvdmVyZWQgYnk6DQogICAgKiBBbm9ueW1vdXMNCg0K
LS0gQWJvdXQgdGhlIFplcm8gRGF5IEluaXRpYXRpdmUgKFpESSk6DQpFc3RhYmxpc2hlZCBieSBU
aXBwaW5nUG9pbnQsIFRoZSBaZXJvIERheSBJbml0aWF0aXZlIChaREkpIHJlcHJlc2VudHMgDQph
IGJlc3Qtb2YtYnJlZWQgbW9kZWwgZm9yIHJld2FyZGluZyBzZWN1cml0eSByZXNlYXJjaGVycyBm
b3IgcmVzcG9uc2libHkNCmRpc2Nsb3NpbmcgZGlzY292ZXJlZCB2dWxuZXJhYmlsaXRpZXMuDQoN
ClJlc2VhcmNoZXJzIGludGVyZXN0ZWQgaW4gZ2V0dGluZyBwYWlkIGZvciB0aGVpciBzZWN1cml0
eSByZXNlYXJjaA0KdGhyb3VnaCB0aGUgWkRJIGNhbiBmaW5kIG1vcmUgaW5mb3JtYXRpb24gYW5k
IHNpZ24tdXAgYXQ6DQoNCiAgICBodHRwOi8vd3d3Lnplcm9kYXlpbml0aWF0aXZlLmNvbQ0KDQpU
aGUgWkRJIGlzIHVuaXF1ZSBpbiBob3cgdGhlIGFjcXVpcmVkIHZ1bG5lcmFiaWxpdHkgaW5mb3Jt
YXRpb24gaXMNCnVzZWQuIFRpcHBpbmdQb2ludCBkb2VzIG5vdCByZS1zZWxsIHRoZSB2dWxuZXJh
YmlsaXR5IGRldGFpbHMgb3IgYW55DQpleHBsb2l0IGNvZGUuIEluc3RlYWQsIHVwb24gbm90aWZ5
aW5nIHRoZSBhZmZlY3RlZCBwcm9kdWN0IHZlbmRvciwNClRpcHBpbmdQb2ludCBwcm92aWRlcyBp
dHMgY3VzdG9tZXJzIHdpdGggemVybyBkYXkgcHJvdGVjdGlvbiB0aHJvdWdoDQppdHMgaW50cnVz
aW9uIHByZXZlbnRpb24gdGVjaG5vbG9neS4gRXhwbGljaXQgZGV0YWlscyByZWdhcmRpbmcgdGhl
DQpzcGVjaWZpY3Mgb2YgdGhlIHZ1bG5lcmFiaWxpdHkgYXJlIG5vdCBleHBvc2VkIHRvIGFueSBw
YXJ0aWVzIHVudGlsDQphbiBvZmZpY2lhbCB2ZW5kb3IgcGF0Y2ggaXMgcHVibGljbHkgYXZhaWxh
YmxlLiBGdXJ0aGVybW9yZSwgd2l0aCB0aGUNCmFsdHJ1aXN0aWMgYWltIG9mIGhlbHBpbmcgdG8g
c2VjdXJlIGEgYnJvYWRlciB1c2VyIGJhc2UsIFRpcHBpbmdQb2ludA0KcHJvdmlkZXMgdGhpcyB2
dWxuZXJhYmlsaXR5IGluZm9ybWF0aW9uIGNvbmZpZGVudGlhbGx5IHRvIHNlY3VyaXR5DQp2ZW5k
b3JzIChpbmNsdWRpbmcgY29tcGV0aXRvcnMpIHdobyBoYXZlIGEgdnVsbmVyYWJpbGl0eSBwcm90
ZWN0aW9uIG9yDQptaXRpZ2F0aW9uIHByb2R1Y3QuDQoNCk91ciB2dWxuZXJhYmlsaXR5IGRpc2Ns
b3N1cmUgcG9saWN5IGlzIGF2YWlsYWJsZSBvbmxpbmUgYXQ6DQoNCiAgICBodHRwOi8vd3d3Lnpl
cm9kYXlpbml0aWF0aXZlLmNvbS9hZHZpc29yaWVzL2Rpc2Nsb3N1cmVfcG9saWN5Lw0KDQpDT05G
SURFTlRJQUxJVFkgTk9USUNFOiBUaGlzIGUtbWFpbCBtZXNzYWdlLCBpbmNsdWRpbmcgYW55IGF0
dGFjaG1lbnRzLA0KaXMgYmVpbmcgc2VudCBieSAzQ29tIGZvciB0aGUgc29sZSB1c2Ugb2YgdGhl
IGludGVuZGVkIHJlY2lwaWVudChzKSBhbmQNCm1heSBjb250YWluIGNvbmZpZGVudGlhbCwgcHJv
cHJpZXRhcnkgYW5kL29yIHByaXZpbGVnZWQgaW5mb3JtYXRpb24uDQpBbnkgdW5hdXRob3JpemVk
IHJldmlldywgdXNlLCBkaXNjbG9zdXJlIGFuZC9vciBkaXN0cmlidXRpb24gYnkgYW55IA0KcmVj
aXBpZW50IGlzIHByb2hpYml0ZWQuICBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBp
ZW50LCBwbGVhc2UNCmRlbGV0ZSBhbmQvb3IgZGVzdHJveSBhbGwgY29waWVzIG9mIHRoaXMgbWVz
c2FnZSByZWdhcmRsZXNzIG9mIGZvcm0gYW5kDQphbnkgaW5jbHVkZWQgYXR0YWNobWVudHMgYW5k
IG5vdGlmeSAzQ29tIGltbWVkaWF0ZWx5IGJ5IGNvbnRhY3RpbmcgdGhlDQpzZW5kZXIgdmlhIHJl
cGx5IGUtbWFpbCBvciBmb3J3YXJkaW5nIHRvIDNDb20gYXQgcG9zdG1hc3RlckAzY29tLmNvbS4g
DQo