CVE-2006-1249

Vulnerability

An integer overflow exists in how Apple QuickTime Player 7.0.3, 7.0.4 and iTunes 6.0.1, 6.0.2 handle FlashPix (FPX) images. A specially crafted FlashPix file containing a field that specifies a large number of blocks triggers the overflow. This affects both Apple Mac and Windows platforms [1][2].

Exploitation

A remote, unauthenticated attacker can deliver the malicious FPX image via a web page, email attachment, or other means. No user interaction beyond opening the image in QuickTime or an application using the QuickTime plug-in is required. The overflow occurs when the vulnerable code parses the crafted block count field [2].

Impact

Successful exploitation allows the attacker to execute arbitrary code with the privileges of the user running the vulnerable application, or to cause a denial of service. The impact is complete compromise of confidentiality, integrity, and availability [2].

Mitigation

Apple released QuickTime 7.1 on May 11, 2006 which addresses this vulnerability. Users should upgrade to QuickTime 7.1 or later. If upgrading is not possible, disabling the QuickTime plug-in in web browsers or not opening FlashPix images from untrusted sources can mitigate the risk [2].