CVE-2016-2399

概要

参考情報

• debian.org/security/2017/dsa-3800
• nemux.org/2016/02/23/libquicktime-1-2-4 · Exploit
• securityfocus.com/bid/95880 · Third Party Advisory
• packetstormsecurity.com/files/135899/libquicktime-1.2.4-Integer-Overflow.html · Exploit
• exploit-db.com/exploits/39487

libquicktime のその他の脆弱性

• CVE-2017-12145中 6.5In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_ftyp in ftyp.c, which allows attackers to cause a deni…
• CVE-2017-12143中 6.5In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_info in lqt_quicktime.c, which allows attackers to cau…
• CVE-2017-9128中 6.5The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based…
• CVE-2017-9127中 6.5The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-…
• CVE-2017-9126中 6.5The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buff…