RULE(RULE ID:320669)

Rule General Information
Release Date: 2018-01-02
Rule Name: WEB-APP Apple QuickTime enof Atom Parsing Heap Buffer Overflow Vulnerability (CVE-2013-0986)
Severity:
CVE ID:
Rule Protection Details
Description: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted enof atoms in a movie file.
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others
Reference: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
http://lists.apple.com/archives/security-announce/2013/May/msg00001.html
http://support.apple.com/kb/HT5770
http://support.apple.com/kb/HT5784
Solutions
Upgrade to version 7.7.4 to solve the problem.