Apple QuickTime Pict File Matrix Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Secunia Research: Microsoft Office PICT Filter Integer Truncation Vulnerability

====================================================================== Secunia Research 14/12/2010 - Microsoft Office PICT Filter Integer Truncation Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2010-3946

Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."...

Integer overflow

Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."...

CVE-2010-3946

Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."...

CVE-2010-3946

CVE-2010-3946 affects Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack. The vulnerability arises from an integer overflow in the PICT image converter (PICTIM32.FLT) within the Office graphics filters, causing a heap-based overflow when processing crafted PICT files. Successful ...

CVE-2010-3946: Undefined Security Weakness

Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."...

PT-2010-5184

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office 2003 SP3 Microsoft Office Converter Pack Description The issue is related to an integer overflow in the PICT image converter, allowing remote attackers to execute arbitrary code via a crafted PICT image...

Microsoft Office Graphics Filters Remote Code Execution Vulnerabilities (968095)

This host is missing a critical security update according to Microsoft Bulletin MS10-105. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office PICT Image Converter (CVE-2010-3946) Integer Overflow Vulnerability

Description Microsoft Office is prone to a remote integer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document that contains a specially...

Microsoft Graphics Filters PICT Image Converter Integer Overflow (MS10-105; CVE-2010-3946)

PICT is a graphics file format that allows the interchange of graphics both bitmapped and vector, and some limited text support, between Mac applications. A remote code execution vulnerability has been discovered in the way that Microsoft Office allocates buffer size when handling PICT image file...

iDefense Security Advisory 12.07.10: Apple QuickTime PICT Memory Corruption Vulnerability

iDefense Security Advisory 12.07.10 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 07, 2010 I. BACKGROUND QuickTime is Apple's media player product used to render video and other media. The PICT file format was developed by Apple Inc. in 1984. PICT files can contain both object-orient...

CVE-2010-3800

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PICT file...

Memory corruption

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PICT file...

CVE-2010-3800

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PICT file...

CVE-2010-3800: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PICT file...

PT-2010-5086

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted PICT file. This is related to the...

Apple QuickTime PICT directBitsRect Pack3 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Apple QuickTime PICT File PackBits Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the application'...

QuickTime < 7.6.9 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.9. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of JP2 images may lead to an application crash or arbitrary code execution. CVE-2010-3787 - Uninitialized memory...