CVE-2011-1374

CVE-2011-1374 refers to a buffer overflow in Apple QuickTime prior to 7.7.3, affecting Windows. The root cause is improper handling of REGION records in PICT files, leading to potential remote code execution or application crash (denial of service). The affected product is Apple QuickTime for Win...

CVE-2012-3757

Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PICT file...

CVE-2012-3756

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted rnet box in an MP4 movie file...

CVE-2012-3752

Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted style element in a QuickTime TeXML file...

CVE-2012-3753

Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIME type...

CVE-2012-3754

Affected software: Apple QuickTime for Windows (ActiveX control). Issue: Use-after-free in Clear() method of the QuickTime ActiveX control, leading to remote code execution or denial of service. Root cause: incorrect handling in the Clear method as described in CVE-2012-3754. Impact: arbitrary co...

CVE-2012-3758

CVE-2012-3758 affects Apple QuickTime before 7.7.3. A buffer overflow in handling the transform attribute of text3GTrack TeXML files can allow remote code execution or cause an application crash (DoS). Public references confirm vulnerability details and mention upgrading to QuickTime 7.7.3 as rem...

CVE-2012-3758

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted transform attribute in a text3GTrack element in a QuickTime TeXML file...

CVE-2012-3755

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Targa image...

CVE-2012-3755

Apple QuickTime contains a buffer overflow in the handling of Targa image files, affecting versions before 7.7.3. Successful exploitation can lead to arbitrary code execution or application crash. Remediation: upgrade to QuickTime 7.7.3 as per Apple advisory APPLE-SA-2012-11-07-1.

Apple QuickTime 7.7.3之前版本多个任意代码执行漏洞

BUGTRAQ ID: 56438 CVE ID: CVE-2011-1374,CVE-2012-3751,CVE-2012-3752,CVE-2012-3753,CVE-2012-3754,CVE-2012-3755,CVE-2012-3756,CVE-2012-3757,CVE-2012-3758 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 QuickTime 7.7.3之前版本存在多个安全漏洞，在处理特制的文件时，可允许攻击者以当前登录用户权限执行任意代码。...

CVE-2012-3753: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIME type...

Apple QuickTime multiple security vulnerabilities

Multiple memory corruptions on different file formats and server responses parsing and in ActiveX components...

CVE-2012-3751: Undefined Security Weakness

Use-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via an HTML document with a crafted qtactivex parameter in an OBJECT element...

CVE-2012-3752: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted style element in a QuickTime TeXML file...

CVE-2012-3758: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted transform attribute in a text3GTrack element in a QuickTime TeXML file...

CVE-2012-3757: Undefined Security Weakness

Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PICT file...

CVE-2011-1374: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted REGION record in a PICT file...

CVE-2012-3756: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted rnet box in an MP4 movie file...

CVE-2012-3754: Undefined Security Weakness

Use-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...