149 matches found
CVE-2017-9127
The quicktimeuseratomsreadatom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted mp4 file...
UBUNTU-CVE-2017-9123
The lqtframeduration function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted mp4 file...
CVE-2017-9128
The quicktimevideowidth function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted mp4 file...
DEBIAN-CVE-2017-9122
The quicktimereadmoov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted mp4 file...
UBUNTU-CVE-2017-9124
The quicktimematch32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted mp4 file...
UBUNTU-CVE-2017-9125
The lqtframeduration function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mp4 file...
UBUNTU-CVE-2017-9127
The quicktimeuseratomsreadatom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted mp4 file...
CVE-2017-9123
The lqtframeduration function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted mp4 file...
DEBIAN-CVE-2017-9126
The quicktimereaddreftable function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted mp4 file...
CVE-2017-9128
The quicktimevideowidth function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted mp4 file...
CVE-2017-9128
CVE-2017-9128 affects libquicktime 1.2.4, where the function quicktime_video_width in lqt_quicktime.c can trigger a heap-based buffer over-read , leading to a denial of service when processing crafted MP4 files. Connected advisories (Debian, Ubuntu, SUSE, Mageia) confirm this issue and provide fi...
CVE-2017-9126
CVE-2017-9126 affects libquicktime 1.2.4, specifically the quicktime_read_dref_table function in dref.c. A crafted MP4 file can trigger a heap-based buffer overflow and application crash, enabling a remote DoS. Multiple connected advisories confirm the issue and provide fixed versions (e.g., Debi...
CVE-2017-9125
CVE-2017-9125 affects libquicktime 1.2.4, where the function lqt_frame_duration in lqt_quicktime.c can be exploited by a crafted MP4 file to cause a remote DoS via a heap-based buffer over-read. Exploitation details are confirmed across multiple vendor advisories (Debian DLA-1042-1, openSUSE open...
CVE-2017-9122
The quicktimereadmoov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted mp4 file...
CVE-2017-9126
The quicktimereaddreftable function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted mp4 file...
CVE-2017-9123
The lqtframeduration function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted mp4 file...
CVE-2017-9123
CVE-2017-9123 concerns the libquicktime 1.2.4 library, where the lqt_frame_duration function can trigger a denial of service via an crafted MP4 file that causes an invalid memory read and application crash. This vulnerability is confirmed across multiple advisories referencing the same issue, inc...
CVE-2017-9124
CVE-2017-9124 affects libquicktime 1.2.4, where the quicktime_match_32 function in util.c can be triggered by a crafted MP4 file to cause a denial of service via a NULL pointer dereference. In public advisories, multiple distributions have addressed this issue (e.g., Debian DLA-1042-1 fixing 2:1....
