Apple QuickTime ActiveX Control Clear Method Use After Free - Improved Performance (CVE-2012-3754)

A use-after-free vulnerability has been reported in Apple QuickTime's ActiveX control. The vulnerability is due to an error while handling a certain method. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted web page using Internet Explorer...

Apple QuickTime MPEG Stream Padding Code Execution (CVE-2012-0659)

A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a heap-based buffer overflow when calculating the padding for an MPEG sample. A remote attacker can exploit this issue by enticing a target user to open a specially crafted MPEG-2 file. Successful...

Apple QuickTime rnet Box Parsing Heap Buffer Overflow (CVE-2012-3756)

A heap buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a bounds-checking error while parsing QuickTime reference movie files. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted QuickTime movie fi...

Apple QuickTime TeXML Style Element Buffer Overflow

Added: 12/24/2012 CVE: CVE-2012-3752 BID: 56557 OSVDB: 87087 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime 7.7.2 and earlier is vulnerable to remote code execution due to a failure to perform appropriate boundary checking. A remote attacker who...

Apple QuickTime TeXML Style Element Buffer Overflow

Added: 12/24/2012 CVE: CVE-2012-3752 BID: 56557 OSVDB: 87087 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime 7.7.2 and earlier is vulnerable to remote code execution due to a failure to perform appropriate boundary checking. A remote attacker who...

Apple QuickTime TeXML Style Element Buffer Overflow

Added: 12/24/2012 CVE: CVE-2012-3752 BID: 56557 OSVDB: 87087 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime 7.7.2 and earlier is vulnerable to remote code execution due to a failure to perform appropriate boundary checking. A remote attacker who...

Apple QuickTime TeXML Style Element Buffer Overflow

Added: 12/24/2012 CVE: CVE-2012-3752 BID: 56557 OSVDB: 87087 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime 7.7.2 and earlier is vulnerable to remote code execution due to a failure to perform appropriate boundary checking. A remote attacker who...

Memory Corruption in QuickTime Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Apple QuickTime software version 7.7.2 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor,...

Apple QuickTime TeXML Style Element Text Specification Buffer Overflow (CVE-2012-3752)

A buffer overflow vulnerability has been reported in Apple QuickTime...

Apple QuickTime Targa File Buffer Overflow (CVE-2012-3755)

A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a bounds-checking error. A remote attacker can exploit this vulnerability by enticing a user to process a specially crafted Targa file. Successful exploitation may lead to arbitrary code execution...

Apple QuickTime 7.7.2 MIME Type Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 OperatingSystems::WINDOWS, :uaname =...

Apple QuickTime 7.7.2 - MIME Type Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 OperatingSystems::WINDOWS, :uaname =...

Apple QuickTime 7.7.2 MIME Type Buffer Overflow

This module exploits a buffer overflow in Apple QuickTime 7.7.2. The stack based overflow occurs when processing a malformed Content-Type header. The module has been tested successfully on Safari 5.1.7 and 5.0.7 on Windows XP SP3. This module requires Metasploit: https://metasploit.com/download...

Apple QuickTime 7.7.2 TeXML Style Element font-table Field Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 OperatingSystems::WINDOWS, :javascript...

Apple QuickTime Targa image Buffer Overflow

A buffer overflow vulnerability in QuickTime PictureViewer.exe and the specific flaw exists within TGA file images encoded data, When encountering an invalid encoded width field and can be result a heap-based buffer overflow occur. And this vulnerability allows remote attackers to execute arbitra...

Apple QuickTime 7.7.2 - TeXML Style Element font-table Field Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 OperatingSystems::WINDOWS, :javascript...

Apple QuickTime 7.7.2 TeXML Style Element font-table Field Stack Buffer Overflow

This module exploits a vulnerability found in Apple QuickTime. When handling a TeXML file, it is possible to trigger a stack-based buffer overflow, and then gain arbitrary code execution under the context of the user. This is due to the QuickTime3GPP.gtx component not handling certain Style...

Apple QuickTime 7.7.2 - Targa image Buffer Overflow

Apple QuickTime 7.7.2 - Targa image Buffer Overflow Application : Apple QuickTime Versions : = before 7.7.3 CVE : 2012-3755 Impact : 9.3 High References : http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html Auther : Senator of Pirates E-Mail : SenatorofPirates.teamatgmail.com...

Apple QuickTime 7.7.2 - Targa image Buffer Overflow

Application : Apple QuickTime Versions : = before 7.7.3 CVE : 2012-3755 Impact : 9.3 High References : http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html Auther : Senator of Pirates E-Mail : SenatorofPirates.teamatgmail.com FaceBook : /SenatorofPirates /SenatorofPiratesInfo...

Apple QuickTime 视频文件缓冲区溢出漏洞

CVE ID: CVE-2012-3756 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 QuickTime在处理特制PM4文件内的'rnet'框时存在缓冲区溢出漏洞，可导致应用意外终止或任意代码执行。 0 Apple Quicktime 7.x 厂商补丁： Apple ----- 请更新到QuickTime 7.7.3： APPLE-SA-2012-11-07-1：QuickTime 7.7.3 链接：http://www.apple.com/quicktime/download/...