Windows QuickTime Player Buffer Overflow Vulnerability

( I don't know if it's an April fool )

Posted on 01 April 2003

As posted to Full Disclosure mailing list:

iDEFENSE Security Advisory 03.31.03:
www.idefense.com...
Buffer Overflow in Windows QuickTime Player
March 31, 2003

I. BACKGROUND

QuickTime Player is a popular media player for both the Microsoft Windows and Apple Mac platforms. More information about the application is available at www.apple.com... .

II. DESCRIPTION

An exploitable buffer overflow condition has been discovered in Apple Computer Inc.'s QuickTime Player, allowing for the remote execution of arbitrary code. The vulnerability lies in the processing of long QuickTime URL's (quicktime:// or through the -u switch). When processing a QuickTime URL, the application is launched in the following manner as can be seen from the Windows registry key HKEY_CLASSES_ROOT/quicktime:

%PATH TO QUICKTIME%\QuickTimePlayer.exe -u"%1"

More : Link

everytime I hear of ANOTHER vulnerability in Windows I have but one answer.

LINUX!!!!!!

Originally posted by Grommer
everytime I hear of ANOTHER vulnerability in Windows I have but one answer.

LINUX!!!!!!

Yes, sure. But what do I have to do with all my softwares who are running ONLY with windows ?

use a program for Linux called Wine, it's a Windows emulator.

Originally posted by Grommer
use a program for Linux called Wine, it's a Windows emulator.

And ALL my softwares designed ONLY for windows will work under Linux System ?

well, not ALL of them, but I've gotten Macromedia Dreamweaver, and all Macromedia products to work, several games, outlooks express, internet explorer, it doesnt GUARANTEE every program will work, however, I've had extrememly good luck with it. A lot has to do with what version of Linux you use, and if you have win installed on another partition. Check it out for yourself
there's a couple of different versions of wine, there's the one from Codeweavers, which I think is better, but you have to pay for it. and check out the screenshots of what wine has gotten to work on the winhq.com site

www.winehq.com...

[Edited on 1-4-2003 by Grommer]

Thanks Grommer.