Alert GCSA-08091 - Vulnerabilita' in Apple QuickTime

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

            Alert ID : GCSA-08091
                Data : 10 settembre 2008
              Titolo : Vulnerabilita' in Apple QuickTime

******************************************************************


:: Descrizione del problema

Sono state riscontrate vulnerabilita' multiple in Apple QuickTime,
che potrebbero essere sfruttate da un attaccante remoto per ottenere
il controllo completo di un sistema che ne sia affetto.

Per una descrizione completa delle vulnerabilita' fare riferimento
alla segnalazione ufficiale di Apple al seguente link:

http://support.apple.com/kb/HT3027



:: Software interessato

Apple QuickTime 7.x



:: Impatto

Esecuzione di codice arbitrario
Ottenimento del controllo completo del sistema



:: Soluzioni

Aggiornare alla versione 7.5.5
http://www.apple.com/quicktime/download/



:: Riferimenti

Apple:
http://support.apple.com/kb/HT3027

FrSirt:
http://www.frsirt.com/english/advisories/2008/2527

Secunia:
http://secunia.com/advisories/31821/

CVE Mitre:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3614
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3615
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3624
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3625
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3626
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3627
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3628
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3629
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3635

-----BEGIN PGP SIGNATURE-----

iQCVAwUBSMelD/OB+SpikaiRAQKl0QQAluM2c/t1R7CLVyBQfclswIvic6Uf8SjF
XuJhO+cK/N6p+bEajifQ7dMeO2i+y4bu1B4jVEh/iQmYlw5ib8e6SX+LtBzXMi5C
QJoDXwyTQPsl8P+pFJYGlgCZ6qoir3my5nOFZktocar3tbdPKS5qignWeJbhbFRV
Ebt8YEa/VDk=
=ZV6U
-----END PGP SIGNATURE-----