CVE-2002-0252

Description

Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header.

Affected products

• apple / quicktime5.0.1 – 5.0.1
• apple / quicktime5.0.2 – 5.0.2

Exploits & proofs of concept

• exploit-dbApple QuickTime 7.2/7.3 (OSX/Windows) - RSTP Response Universalby Subreption LLC.
• exploit-dbApple QuickTime 5.0 - Content-Type Remote Buffer Overflowby UNYUN

References

• MISChttp://www.iss.net/security_center/static/8126.php
• EXPLOIThttps://www.exploit-db.com/exploits/4673
• MAILING_LISThttp://marc.info/?l=bugtraq&m=101320742616105&w=2
• MISChttp://www.securityfocus.com/bid/4064