Home › Resources › Threat Monitor

Threat Monitor

 

« Back to list

Troj.Downloader.JS.Agent.fhx

 
Aliases:
Pattern:201012101330
Threat Type Propagation Methods Systems Affected Risk Level
  • Exploit
  • Windows NT
  • Windows XP
  • Windows 2000
  • Windows 95/98/ME
  • MS-DOS
  • Other
  • Low
 
Apple QuickTime is prone to a heap-based buffer overflow vulnerability.
The vulnerability is caused due to a flaw exists within QuickTimeAuthoring.qtx during the parsing of DELTA_FLI chunks stored within a malformed '.fli' file. The application trusts a user-supplied length for decompression which can be modified to copy more data that leading to a buffer overflow. By persuading a victim to visit a crafted FLC file, a remote attacker could exploit this vulnerability to cause the application to crash or execute arbitrary code on the system with the privileges of the victim.

Affected: Apple QuickTime Player < 7.6.6

Back to Top

Next Steps

Questions? Call: (888) 233-0776

On Demand Demos

GUI demonstrations about ProSecure™ security appliances

Become a Partner

Our partners are our greatest asset. Join the PowerShift Program and expand your portfolio of security products.