CVE-2008-1019: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted PICT image file, related to an improperly terminated memory copy loop...

CVE-2008-1020: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak encoding, related to error checking and error messages...

Apple QuickTime Clipping Region Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the quicktime.qt...

Apple QuickTime Malformed VR obji Atom Parsing Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the parsing of the QuickTime VR 'obji' atom...

Apple Quicktime Multiple Opcode Memory Corruption Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the quickTime.qts while parsing corrupted .pic...

Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the parsing of the QuickTime Channel Composit...

Update IPS-1 with a Protection against Apple QuickTime and Apple QuickDraw Vulnerabilities

Several vulnerabilities have been identified within various versions of Apple QuickTime and Apple QuickDraw that, if exploited, would allow a remote attacker to execute arbitrary code on a vulnerable system...

Apple QuickTime QTPlugin.ocx ActiveX控件多个栈溢出漏洞

BUGTRAQ ID: 27769 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime所安装的QTPlugin.ocx ActiveX控件在处理畸形参数数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 QTPlugin.ocx ActiveX控件没有正确地验证对SetBgColor、SetHREF、SetMovieName、SetTarget和SetMatrix函数的输入，如果用户受骗访问了恶意网页并向这些函数传送了超长字符串的话，就可能触发栈溢出，导致执行任意指令。 Apple QuickTime Player = 7.4.1 临时解决方法...

Stack overflow

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...

CVE-2008-0778

Multiple stack-based buffer overflows exist in the QTPlugin.ocx ActiveX control of Apple QuickTime 7.4.1 and earlier. The vulnerability affects the QTPlugin.ocx component and is triggered by long arguments to the SetBgColor, SetHREF, SetMovieName, SetTarget, and SetMatrix methods, allowing remote...

CVE-2008-0778: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...

Apple QuickTime ActiveX buffer overflow

Multiple buffer overflows in different methods and properties...

Memory corruption

Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a movie file with Image Descriptor IDSC atoms containing an invalid atom size, which triggers memory corruption...

Buffer overflow

Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding...

CVE-2008-0032

Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption...

CVE-2008-0033

Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a movie file with Image Descriptor IDSC atoms containing an invalid atom size, which triggers memory corruption...

CVE-2008-0036

Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding...

CVE-2008-0032

Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption...

Memory corruption

Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Sorenson 3 video file, which triggers memory corruption...

CVE-2008-0036

Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding...