25 matches found
EUVD-2007-4688
Malware in sbrugna...
EUVD-2007-5026
Malware in sbrugna...
CVE-2011-0248
Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted QTL file...
Stack overflow
Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted QTL file...
CVE-2011-0248
Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted QTL file...
CVE-2007-4706
Heap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute arbitrary code via a crafted QTL file...
Heap overflow
Heap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute arbitrary code via a crafted QTL file...
CVE-2007-4706
Heap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute arbitrary code via a crafted QTL file...
Apple QuickTime QTL文件处理远程堆溢出漏洞
BUGTRAQ ID: 26868 CVECAN ID: CVE-2007-4706 Apple QuickTime是一款流行的多媒体播放器，支持多种媒体格式。 QuickTime处理QTL文件时存在堆溢出漏洞，如果用户受骗查看了恶意的QTL文件的话，攻击者就可能导致播放器意外终止或执行任意指令。 Apple QuickTime Player 7.3.1 Apple QuickTime Player 7.3.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
QuickTime < 7.3.1 Multiple Vulnerabilities (Mac OS X)
The version of QuickTime installed on the remote Mac OS X host is older than 7.3.1. Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted RTSP movie, QTL file, or Flash media file...
CVE-2007-4673
Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file. NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045...
Design/Logic Flaw
Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute arbitrary commands via a QuickTime Media Link QTL file with an embed XML element and a qtnext parameter containing the...
CVE-2007-5045
Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute arbitrary commands via a QuickTime Media Link QTL file with an embed XML element and a qtnext parameter containing the...
Apple Quicktime /w IE .qtl Version XAS Remote Exploit PoC
Exploit for unknown platform in category remote exploits ========================================================= Apple Quicktime /w IE .qtl Version XAS Remote Exploit PoC ========================================================= embed sr...
QuickTime rtsp src URL buffer overflow
Added: 01/04/2007 CVE: CVE-2007-0015 BID: 21829 OSVDB: 31023 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow in QuickTime allows command execution when a user opens a specially crafted QTL file containing a long src parameter starting with rtsp:/...
QuickTime rtsp src URL buffer overflow
Added: 01/04/2007 CVE: CVE-2007-0015 BID: 21829 OSVDB: 31023 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow in QuickTime allows command execution when a user opens a specially crafted QTL file containing a long src parameter starting with rtsp:/...
QuickTime rtsp src URL buffer overflow
Added: 01/04/2007 CVE: CVE-2007-0015 BID: 21829 OSVDB: 31023 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow in QuickTime allows command execution when a user opens a specially crafted QTL file containing a long src parameter starting with rtsp:/...
MOAB-01-01-2007.rb.txt
!/usr/bin/ruby Copyright c LMH Kevin Finisterre Notes: Our command string is loaded on memory at a static address normally, but this depends on execution method and the string length. The address set in this exploit will be likely successful if we open the resulting QTL file directly, without...
Apple Quicktime RTSP畸形URL处理缓冲区溢出漏洞
Apple QuickTime是一款流行的多媒体播放器，支持多种媒体格式。 Apple QuickTime在处理畸形的RTSP协议URL时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 Apple QuickTime在处理带超长“src”参数的RTSP协议的URL串时存在栈缓冲区溢出漏洞，远程攻击者可以通过构造类似“rtsp://any character:256 bytes”的URL串诱使用户点击，系统调用QuickTime处理时导致溢出发生，执行攻击者的任意指令。 Apple QuickTime Player 7.x 临时解决方法：...