Trend Micro Security

Apple QuickTime STSD JPEG Atom Heap Corruption

  危険度: : 緊急
  CVE識別番号: CVE-2009-0007

  概要

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms.

  トレンドマイクロの対策

Apply associated Trend Micro DPI Rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1003258
  Trend Micro Deep Security DPI Rule Name: 1003258 - Apple QuickTime STSD JPEG Atom Heap Corruption