CVE-2005-3713: Buffer Overflow
Published Dec 31, 2005
·Updated
Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application Extension Block that modifies the heap in the Picture Modifier block.
Affected Software
4 affected components
QuickTime Player=7.0.1
QuickTime Player=7.0
QuickTime Player=7.0.2
QuickTime Player<=7.0.3
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2005
CVE Published
05:00 AM
Jan 11, 2006
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3713?
CVE-2005-3713 is considered a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2005-3713?
To mitigate CVE-2005-3713, upgrade Apple QuickTime to version 7.0.4 or later.
3
What type of attack does CVE-2005-3713 facilitate?
CVE-2005-3713 facilitates remote code execution attacks via specially crafted GIF files.
4
Which versions of Apple QuickTime are affected by CVE-2005-3713?
CVE-2005-3713 affects Apple QuickTime versions up to 7.0.3, including 7.0.1, 7.0, and 7.0.2.
5
Can CVE-2005-3713 be exploited via the web?
Yes, CVE-2005-3713 can be exploited remotely through malicious GIF files accessed via the web.