1662 matches found
CVE-2008-0036
CVE-2008-0036 : Buffer overflow in Apple QuickTime prior to 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, triggering during decoding. Affected software: Apple QuickTime before 7.4. Root cause: overflow during decoding of the crafted PICT data. Impact i...
CVE-2008-0033
Summary: CVE-2008-0033 affects Apple QuickTime prior to 7.4. The vulnerability resides in parsing of Image Descriptor (IDSC) atoms within QTIF image files, where specifying a malicious atom size can trigger an under- or mis-allocated heap condition, resulting in memory corruption. This can lead t...
CVE-2008-0033
Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a movie file with Image Descriptor IDSC atoms containing an invalid atom size, which triggers memory corruption...
CVE-2008-0031
CVE-2008-0031 affects Apple QuickTime before 7.4. A crafted Sorenson 3 video file can trigger memory corruption, enabling remote denial of service and arbitrary code execution. Impact is via parsing the video stream; exploitation details are described in the connected sources. remediation: upgrad...
CVE-2008-0031
Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Sorenson 3 video file, which triggers memory corruption...
CVE-2008-0033: Undefined Security Weakness
Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a movie file with Image Descriptor IDSC atoms containing an invalid atom size, which triggers memory corruption...
CVE-2008-0036: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding...
CVE-2008-0031: Undefined Security Weakness
Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Sorenson 3 video file, which triggers memory corruption...
[Full-disclosure] iDefense Security Advisory 01.15.08: Apple QuickTime Macintosh Resource Processing Heap Corruption Vulnerability
iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND Quicktime is Apple's media player product, and is used to render video and other media. For more information visit the vendor's web site at the following URL...
CVE-2008-0032: Undefined Security Weakness
Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption...
Apple QuickTime Player buffer overflow
Buffer overflow on HTTP error message displaying...
Buffer overflow
Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message...
CVE-2008-0234
Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message...
CVE-2008-0234
Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message...
CVE-2008-0234: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message...
Design/Logic Flaw
Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts via a crafted QuickTime movie...
Heap overflow
Heap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute arbitrary code via a crafted QTL file...
CVE-2007-4706
Heap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute arbitrary code via a crafted QTL file...
CVE-2007-4707
Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts via a crafted QuickTime movie...