ZDI-12-077 : Apple QuickTime QTVR QTVRStringAtom Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-077 : Apple QuickTime QTVR QTVRStringAtom Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-077 June 6, 2012 - -- CVE ID: CVE-2012-0667 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendor...

Apple QuickTime 7.7.2之前版本QTVR文件远程代码执行漏洞

BUGTRAQ ID: 53583 CVE ID: CVE-2012-0667 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 Windows上的Apple QuickTime 7.7.2之前版本在处理特制的QTVR视频文件时存在整数签名错误，可允许远程攻击者执行任意代码或造成拒绝服务。 0 Apple QuickTime Player 7.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

QuickTime < 7.7.2 Multiple Vulnerabilities

Binary data 6489.prm...

Apple QuickTime 7.7.2之前版本多个远程任意代码执行漏洞

BUGTRAQ ID: 53547 CVE ID: CVE-2012-0663,CVE-2012-0664,CVE-2012-0665,CVE-2012-0666,CVE-2012-0667,CVE-2012-0668,CVE-2012-0669,CVE-2012-0670,CVE-2012-0671,CVE-2012-0265 OS X Lion Server 内含一组应用软件，可将任意一台Mac 变成功能强大的服务器。Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 Windows 7、Vista、XP上的Apple QuickTime...

CVE-2012-0667

CVE-2012-0667 affects Apple QuickTime on Windows prior to 7.7.2. The vulnerability resides in the QuickTimeVR.qtx component, where a signedness error in processing a QTVRStringAtom leads to an integer overflow, enabling remote code execution or an application crash when a crafted QTVR movie is op...

ARP Spoof

Spoof ARP replies and poison remote ARP caches to conduct IP address spoofing or a denial of service. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ARP Spoof', 'Description' = %q Spoof ARP...

CVE-2011-0667

CVE-2011-0667 is a local privilege-escalation in the Windows kernel (win32k.sys) caused by a use-after-free in driver object management. A crafted application can abuse this to gain kernel privileges on affected systems, including Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2506223)

This host is missing a critical security update according to Microsoft Bulletin MS11-034. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for ocsinventory-agent FEDORA-2010-16314

Check for the Version of ocsinventory-agent OpenVAS Vulnerability Test Fedora Update for ocsinventory-agent FEDORA-2010-16314 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for ocsinventory-agent FEDORA-2010-16335

Check for the Version of ocsinventory-agent OpenVAS Vulnerability Test Fedora Update for ocsinventory-agent FEDORA-2010-16335 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for ocsinventory-agent FEDORA-2010-16335

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

OCS Inventory NG Agent 'Backend.pm' Perl Module Handling Code Execution Vulnerability

OCS Inventory NG Agent is prone to a vulnerability that lets local attackers execute arbitrary Perl code. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

OCS Inventory NG Agent 'Backend.pm' Perl Module Handling Code Execution Vulnerability

OCS Inventory NG Agent is prone to a vulnerability that lets local attackers execute arbitrary Perl code. Local attackers can leverage this issue to execute arbitrary code via the application's insecure Perl module search path. This may allow attackers to elevate their privileges and compromise t...

Fedora 13 : ocsinventory-agent-1.1.2.1-1.fc13 (2010-16335)

security update for CVE-2009-0667 http://bugs.debian.org/590879 http://www.debian.org/security/2009/dsa-1828 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

CVE-2010-0667

Summary : CVE-2010-0667 affects MoinMoin Wiki. When running MoinMoin 1.9 before 1.9.1, the sys.argv array is not properly cleared in environments where GATEWAY_INTERFACE is set, enabling remote attackers to obtain sensitive information via unspecified vectors. Affected software : MoinMoin Wiki (v...

CVE-2010-0667

MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAYINTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors...

RHEL 3 / 4 / 5 : acroread (RHSA-2008:0144)

Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Reader allows users to view and print documents in portable documen...

Debian: Security Advisory (DSA-1828-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-0667

Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a Trojan horse Perl module in an arbitrary directory...

CVE-2009-0667

CVE-2009-0667 involves the OCS Inventory NG Agent’s Backend.pm Perl module. The OpenVAS details confirm a local code-execution vulnerability where local attackers can leverage an insecure Perl module search path to run arbitrary Perl code, potentially elevating privileges and compromising the age...