1409 matches found
CVE-2012-3752
Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted style element in a QuickTime TeXML file...
CVE-2012-3753
Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIME type...
CVE-2012-3754
Affected software: Apple QuickTime for Windows (ActiveX control). Issue: Use-after-free in Clear() method of the QuickTime ActiveX control, leading to remote code execution or denial of service. Root cause: incorrect handling in the Clear method as described in CVE-2012-3754. Impact: arbitrary co...
CVE-2012-3758
CVE-2012-3758 affects Apple QuickTime before 7.7.3. A buffer overflow in handling the transform attribute of text3GTrack TeXML files can allow remote code execution or cause an application crash (DoS). Public references confirm vulnerability details and mention upgrading to QuickTime 7.7.3 as rem...
CVE-2012-3758
Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted transform attribute in a text3GTrack element in a QuickTime TeXML file...
CVE-2012-3755
Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Targa image...
CVE-2012-3755
Apple QuickTime contains a buffer overflow in the handling of Targa image files, affecting versions before 7.7.3. Successful exploitation can lead to arbitrary code execution or application crash. Remediation: upgrade to QuickTime 7.7.3 as per Apple advisory APPLE-SA-2012-11-07-1.
Apple QuickTime 7.7.3之前版本多个任意代码执行漏洞
BUGTRAQ ID: 56438 CVE ID: CVE-2011-1374,CVE-2012-3751,CVE-2012-3752,CVE-2012-3753,CVE-2012-3754,CVE-2012-3755,CVE-2012-3756,CVE-2012-3757,CVE-2012-3758 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 QuickTime 7.7.3之前版本存在多个安全漏洞，在处理特制的文件时，可允许攻击者以当前登录用户权限执行任意代码。...
Apple QuickTime multiple security vulnerabilities
Multiple memory corruptions on different file formats and server responses parsing and in ActiveX components...
Apple QuickTime 7.7.2 MIME Type Buffer Overflow
This module exploits a buffer overflow in Apple QuickTime 7.7.2. The stack based overflow occurs when processing a malformed Content-Type header. The module has been tested successfully on Safari 5.1.7 and 5.0.7 on Windows XP SP3. Module Options msf use...
Apple QuickTime 7.7.2 TeXML Style Element font-table Field Stack Buffer Overflow
This module exploits a vulnerability found in Apple QuickTime. When handling a TeXML file, it is possible to trigger a stack-based buffer overflow, and then gain arbitrary code execution under the context of the user. This is due to the QuickTime3GPP.gtx component not handling certain Style...
Apple QuickTime Player 7.7.2 - Crash (PoC)
Apple QuickTime Player 7.7.2 - Crash PoC !/usr/bin/perl Title : Apple QuickTime Player 7.7.2 Division By Zero Version : 7.7.21680.56 Date : 2012-10-23 Vendor : http://www.apple.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- Don't...
Apple QuickTime Player 7.7.2 Crash
!/usr/bin/perl Title : Apple QuickTime Player 7.7.2 Division By Zero Version : 7.7.21680.56 Date : 2012-10-23 Vendor : http://www.apple.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- Don't forget that exploitable bugs will be...
Apple QuickTime Player 7.7.2 - Crash (PoC)
!/usr/bin/perl Title : Apple QuickTime Player 7.7.2 Division By Zero Version : 7.7.21680.56 Date : 2012-10-23 Vendor : http://www.apple.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- Don't forget that exploitable bugs will be...
Apple QuickTime Player 7.7.2 Division By Zero
Division by zero vulnerability during the handling of the .mov files. That will trigger a denial of service condition Title : Apple QuickTime Player suffers from Division By Zero Version : 7.7.21680.56 Date : 2012-10-23 Vendor : http://www.apple.com Impact : Med/High Contact : coolkaveh at...
Apple QuickTime TeXML Transform Attribute Parsing Buffer Overflow (CVE-2012-0663)
A stack buffer overflow vulnerability has been reported in Apple QuickTime...
Apple QuickTime PICT File Processing Memory Corruption (CVE-2012-0671)
A memory corruption vulnerability has been reported in Apple QuickTime...
Apple QuickTime Plugin SetLanguage Buffer Overflow (CVE-2012-0666)
A stack buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to insufficient bounds checking when parsing parameters to a certain method inside the QuickTime plugin. A remote attacker can exploit this issue by enticing a target user to open a specially...