90_ 发表于 2016-5-22 13:27:50

Apple Quicktime-MOV文件分析内存损坏漏洞

本帖最后由 90_ 于 2016-5-22 15:56 编辑

CVE: 2016-1848
#####################################################################################
  
Application: Apple Quicktime
  
Platforms: OSX
  
Author: Francis Provencher of COSIG
  
Website: http://www.protekresearchlab.com/
  
Twitter: @COSIG_ @protekresearch
  
CVE-2016-1848
  
#####################################################################################
  
1) Introduction
2) Report Timeline
3) Technical details
4) POC
  
#####################################################################################
  
===============
1) Introduction
===============
  
QuickTime is an extensible multimedia framework developed by Apple Inc., capable of handling various formats of digital video, picture, sound, panoramic images, and interactivity. The classic version of QuickTime is available for Windows Vista and later, as well as Mac OS X Leopard and later operating systems. A more recent version, QuickTime X, is currently available on Mac OS X Snow Leopard and newer.
  
(https://en.wikipedia.org/wiki/QuickTime)
  
#####################################################################################
  
============================
2) Report Timeline
============================
  
2016-03-14: Francis Provencher from COSIG report issue to Apple security team;
2016-03-21: Apple security team  confirmed this issue;
2016-05-17: Apple fixed this issue;
  
https://support.apple.com/en-us/HT206567
#####################################################################################
  
============================
3) Technical details
============================
  
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime.
  
User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
  
The specific flaw exists within the parsing of invalid data in the mdat atom. An attacker can use this flaw to read outside the
  
allocated buffer, which could allow for the execution of arbitrary code in the context of the current process.
  
#####################################################################################
  
===========
  
4) POC
  
===========
  
http://protekresearchlab.com/exploits/COSIG-2016-19.mov

cl476874045 发表于 2016-5-22 14:20:32

asion 发表于 2016-5-22 16:55:17

谢谢楼主的分享

Lucifer 发表于 2016-5-22 17:47:59

非常感谢

yusiii 发表于 2016-5-23 00:46:50

非常感谢

CHRIS 发表于 2016-5-23 01:59:57

谢谢楼主的分享

小龙 发表于 2016-5-23 02:12:52

非常感谢

Micah 发表于 2016-5-23 02:35:26

我是来水经验的……

wilist 发表于 2016-5-23 07:58:03

支持，看起来还是可以的

若冰 发表于 2016-5-23 08:26:41

页: [1]
查看完整版本: Apple Quicktime-MOV文件分析内存损坏漏洞