libextractor qtextractor parse_trak_atom() buffer overflow
| libextractor-qtextractor-bo (26532) |  High Risk |
Description:
libextractor is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the parse_trak_atom() function in the qtextractor plugin. By creating a specially-crafted QuickTime movie file, a remote attacker could overflow a buffer and execute arbitrary code on the system if the attacker could persuade a victim to open the malicious file with an application linked to libextractor.
Platforms Affected:
- Debian, Debian Linux 3.1
- Gentoo, Linux
- libExtractor, libextractor 0.5.13 and prior
Remedy:
Upgrade to the latest version of libextractor (0.5.14 or later), available from the libextractor Web page. See References.
For Gentoo Linux:
Refer to Gentoo Linux Security Announcement GLSA 2006-05-14 for patch, upgrade, or suggested workaround information. See References.
For Debian GNU/Linux:
Refer to DSA-1081-1 for patch, upgrade, or suggested workaround information. See References.
Consequences:
Gain Access
References:
- Full-Disclosure Mailing List, Wed May 17 2006 - 16:01:20 CDT, Two heap overflow in libextractor 0.5.13 (rev 2832) at http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0430.html.
- libextractor Web page, libextractor - a simple library for keyword extraction at http://gnunet.org/libextractor/.
- BID-18021: Libextractor Multiple Heap Buffer Overflow Vulnerabilities
- CVE-2006-2458: Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).
- DSA-1081: libextractor -- buffer overflow
- GLSA-200605-14: libextractor: Two heap-based buffer overflows
- SA20150: libextractor asfextractor/qtextractor Buffer Overflow Vulnerabilities
- SECTRACK ID: 1016118: libextractor Buffer Overflow in Processing ASF and QT Files Permit Arbitrary Code Execution
- SUSE-SR:2006:012: SUSE Security Summary Report
- VUPEN/ADV-2006-1848: Libextractor asfextractor and qtextractor Plugins Heap Overflow Vulnerabilities
Reported:
May 17, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2009 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net