CVE-2005-2753: Integer Overflow
Published Nov 5, 2005
·Updated
Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file that causes a sign extension of the length element in a Pascal style string.
Affected Software
7 affected components
QuickTime Player=7.0.1
QuickTime Player=7.0
QuickTime Player=6.5.2
QuickTime Player=7.0.1
QuickTime Player<=7.0.2
QuickTime Player=7.0.1
QuickTime Player=6.5.2
Remediation
Patch Available
Patch Available
Event History
Nov 5, 2005
CVE Published
11:02 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2753?
CVE-2005-2753 has a severity rating that indicates it can lead to arbitrary code execution if exploited.
2
How do I fix CVE-2005-2753?
The vulnerability can be mitigated by updating Apple QuickTime to version 7.0.3 or later.
3
What types of files are associated with the exploitation of CVE-2005-2753?
CVE-2005-2753 can be exploited through specially crafted MOV files.
4
Which versions of Apple QuickTime are affected by CVE-2005-2753?
CVE-2005-2753 affects Apple QuickTime versions up to and including 7.0.2.
5
Is user interaction required to exploit CVE-2005-2753?
Yes, exploiting CVE-2005-2753 requires user-assisted action to open a malicious MOV file.