CVE-2009-0004

Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted MP3 audio file...

CVE-2009-0002

CVE-2009-0002 is a heap-based buffer overflow in Apple QuickTime prior to 7.6 triggered by processing THKD atoms in QTVR movie files. Remote attackers could cause a denial of service and, in some cases, arbitrary code execution. Affected: QuickTime on Mac OS X and Windows (versions older than 7.6...

CVE-2009-0001

Apple QuickTime before 7.6 is vulnerable to a heap-based buffer overflow triggered by processing crafted RTSP URLs, potentially allowing remote code execution or application termination. Remediation: update to Apple QuickTime 7.6 or newer (per cited advisories).

CVE-2009-0004

Apple QuickTime prior to 7.6 is affected by multiple CVEs including CVE-2009-0004, where a buffer overflow in QuickTime’s handling of MPEG-2/MP3 content can cause application termination or arbitrary code execution. The OpenVAS/Nessus entries reference Windows and Mac OS X variants of QuickTime

CVE-2009-0006

Apple QuickTime before 7.6 is affected by CVE-2009-0006, a Cinepak MDAT heap overflow due to a signedness error . This allows remote code execution or a denial of service when parsing Cinepak-encoded movie files with a crafted MDAT atom. Exploitation details across sources indicate the issue can ...

CVE-2009-0003

Apple QuickTime prior to 7.6 contains a heap-based buffer overflow in processing AVI headers, specifically when the nBlockAlign value in the _WAVEFORMATEX structure is malformed. Consequences cited include possible DoS (application termination) and arbitrary code execution. CVE-2009-0003 is corro...

CVE-2009-0006

Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a Cinepak encoded movie file with a crafted MDAT atom that triggers a heap-based buffer overflow...

CVE-2009-0002

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms...

Apple QuickTime STSD JPEG Atom Heap Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the handling of JPEG atoms embedded in STSD...

Apple QuickTime VR Track Header Atom Heap Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple Quicktime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the handling of movie data encoded using the...

Apple QuickTime AVI Header nBlockAlign Heap Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of AVI file...

Apple QuickTime Malformed .mov File Buffer Overflow Vulnerability

This host has QuickTime installed, which is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbapplequicktimebofvuln.nasl 4456 2016-11-09 12:40:37Z cfi $ Apple QuickTime Malformed .mov File Buffer Overflow Vulnerability Authors: Sharath S Copyright: Copyright c 2008 Greenbo...

Apple QuickTime 'STSZ' Atoms内存破坏漏洞

BUGTRAQ ID: 31546 CVE ID：CVE-2008-3626 CNCVE ID：CNCVE-20083626 Apple QuickTime是一款流行的媒体处理程序。 Apple QuickTime处理特殊构建的媒体文件存在问题，远程攻击者可以利用漏洞进行缓冲区溢出，可导致以应用程序权限执行任意指令。 问题存在于CallComponentFunctionWithStorage函数中对STSZ atoms的处理，当samplesizetable中的条目过大时，可触发内存破坏，可能以当前用户上下文执行任意指令。 Apple TV 2.1 Apple TV 2.0 Apple ...

Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities (Windows)

The host is installed with Apple QuickTime which is prone to Multiple Arbitrary Code Execution Vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplequicktimemultvulnwin.nasl 5375 2017-02-20 16:39:23Z cfi $ Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities Windows Authors:...

Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities - Windows

Apple QuickTime is prone to multiple arbitrary code execution vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apple QuickTime Movie/PICT/QTVR Multiple Remote Vulnerabilities

This host has Apple QuickTime installed, which prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplequicktimemultvuln900121.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: Apple QuickTime Movie/PICT/QTVR Multiple Remote Vulnerabilities Authors: Sharath S Copyright:...

Apple QuickTime Movie/PICT/QTVR Multiple Remote Vulnerabilities (HT3027)

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

Apple QuickTime Version Detection for Windows

Detects the installed version of Apple QuickTime. The script logs in via smb, searches for executable of Apple QuickTime Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2008-4116

Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service browser crash or possibly execute arbitrary code via a long type attribute in a quicktime tag 1 on a web page or embedded in a 2 .mp4 or 3 .mov file, possibly related to the Checkstackcook...