Sploitus

Exploit for QuickTime JPEG buffer overflow

CVE-2005-2340

saint · 2006-01-24

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=SAINT:05FF607A04C0B67EE9245115451C5FE3
Added: 01/24/2006  
CVE: [CVE-2005-2340](<https://vulners.com/cve/CVE-2005-2340>)  
BID: [16212](<http://www.securityfocus.com/bid/16212>)  
OSVDB: [22335](<http://www.osvdb.org/22335>)  


### Background

[QuickTime](<http://www.apple.com/quicktime/player/>) is a media player for Windows and Mac OS platforms. 

### Problem

A buffer overflow in QuickTime allows command execution when a user opens a specially crafted JPEG file. 

### Resolution

[Upgrade](<http://www.apple.com/quicktime/download/>) to QuickTime 7.0.4 or higher. 

### References

<http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0392.html>  


### Limitations

Exploit works on Apple QuickTime PictureViewer 6.5.2. A user must download and open the specially crafted JPEG file in order for exploitation to succeed. 

### Platforms

Windows