Apple QuickTime FlashPix NumberOfTiles - Remote Code Execution

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 2 Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/apple-quicktime-flashpix-numberoftiles-vulnerability/ ''' ''' Title : Apple QuickTime FlashPix NumberOfTiles Remote Code...

Null pointer dereference

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the MarshaledpUnk attribute, which triggers unmarshalling of an untrusted pointer...

CVE-2010-1818

CVE-2010-1818 affects Apple QuickTime QTPlugin.ocx (QuickTime 6.x and 7.x before 7.6.8). The vulnerability arises from an input validation error in the _Marshaled_pUnk parameter, triggering unmarshalling of an untrusted pointer and allowing remote code execution with the user’s privileges. Public...

CVE-2010-1818

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the MarshaledpUnk attribute, which triggers unmarshalling of an untrusted pointer...

CVE-2010-1818: Access of Uninitialized Pointer

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the MarshaledpUnk attribute, which triggers unmarshalling of an untrusted pointer...

Apple QuickTime ActiveX _Marshaled_pUnk Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the QTPlugin.ocx...

New Remote Flaw in Apple QuickTime Bypasses ASLR and DEP

A Spanish security researcher has discovered a new vulnerability in Apple’s QuickTime software that can be used to bypass both ASLR and DEP on current versions of Windows and give an attacker control of a remote PC. The flaw apparently results from a parameter from an older version of QuickTime...

Apple QuickTime - _Marshaled_pUnk Backdoor Client-Side Arbitrary Code Execution

Apple QuickTime - MarshaledpUnk Backdoor Client-Side Arbitrary Code Execution Original Source: http://reversemode.com/index.php?option=comcontent&task=view&id=69&Itemid=1 Victim prerequisites: Internet Explorer. XP,Vista,W7. Apple Quicktime 7.x, 6.x 2004 versions are also vulnerable, older versio...

Apple QuickTime '_Marshaled_pUnk' Remote Code Execution Vulnerability

Description Apple QuickTime is prone to a remote code-execution vulnerability that affects the 'QTPlugin.ocx' ActiveX control because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful...

Apple QuickTime 7.6.7 _Marshaled_pUnk Code Execution

This module exploits a memory trust issue in Apple QuickTime 7.6.7. When processing a specially-crafted HTML page, the QuickTime ActiveX control will treat a supplied parameter as a trusted pointer. It will then use it as a COM-type pUnknown and lead to arbitrary code execution. This exploit...

Apple QuickTime - '_Marshaled_pUnk' Backdoor Client-Side Arbitrary Code Execution

Original Source: http://reversemode.com/index.php?option=comcontent&task=view&id=69&Itemid=1 Victim prerequisites: Internet Explorer. XP,Vista,W7. Apple Quicktime 7.x, 6.x 2004 versions are also vulnerable, older versions not checked 1. Victim is enticed into visiting, by any mean, a specially...

Apple QuickTime Crafted HTTP Error Response Buffer Overflow (CVE-2008-0234)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video stream formats, which include RSTP. There exists a buffer overflow vulnerability in Apple QuickTime application. The flaw ...

CVE-2010-1799

Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

CVE-2010-1799: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

Apple QuickTime 7.6.6 Invalid SMIL URI Buffer Overflow

This module exploits a buffer overflow in Apple QuickTime 7.6.6. When processing a malformed SMIL uri, a stack-based buffer overflow can occur when logging an error message. Module Options msf use exploit/windows/browser/apple/quicktimesmildebug msf undefinedquicktimesmildebug show actions...

Apple QuickTime FLIC Animation File Buffer Overflow (CVE-2006-4384)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio and video formats. One of the supported video formats is the Autodesk Animator and/or Autodesk Animator Pro format, known as FLI...

Apple QuickTime Streaming Debug Error Logging Buffer Overflow

Added: 08/05/2010 BID: 41962 OSVDB: 66636 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime is vulnerable to a stack buffer overflow in QuickTimeStreaming.qtx when processing specially crafted SMIL files. The crafted SMIL files contain an invalid and...

Apple QuickTime Streaming Debug Error Logging Buffer Overflow

Added: 08/05/2010 BID: 41962 OSVDB: 66636 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime is vulnerable to a stack buffer overflow in QuickTimeStreaming.qtx when processing specially crafted SMIL files. The crafted SMIL files contain an invalid and...

Apple QuickTime Streaming Debug Error Logging Buffer Overflow

Added: 08/05/2010 BID: 41962 OSVDB: 66636 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime is vulnerable to a stack buffer overflow in QuickTimeStreaming.qtx when processing specially crafted SMIL files. The crafted SMIL files contain an invalid and...

Apple QuickTime Streaming Debug Error Logging Buffer Overflow

Added: 08/05/2010 BID: 41962 OSVDB: 66636 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime is vulnerable to a stack buffer overflow in QuickTimeStreaming.qtx when processing specially crafted SMIL files. The crafted SMIL files contain an invalid and...