CVE-2007-4676

Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing 1 Poly type 0x0070 through 0x0074 and 2 PackBitsRgn field 0x0099 opcodes in a PICT image...

Apple QuickTime PICT Image Parsing Malformed Records (CVE-2007-4672; CVE-2007-4676; CVE-2009-0010)

Apple QuickTime is a multimedia player that supports a wide range of media formats. A buffer overflow vulnerability has been reported in Apple QuickTime. A remote attacker can exploit this vulnerability via a specially crafted PICT file - an image file format that can be processed by the QuickTim...

Apple QuickTime Uncompressedfile Opcode Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must open a malicious image file. The specific flaw exists in the parsing of the pict file format. If ...

Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist in the parsing of Poly type...

Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist in the parsing of the PackBitsR...

Apple QuickDraw Manager heap buffer overflow vulnerability

Overview Apple QuickDraw contains a heap buffer overflow vulnerability. This vulnerability may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description PICT is a graphics file format that was used by Apple Macintosh systems prior to Mac OS X as their standa...

Apple QuickTime多个远程缓冲区溢出漏洞

Apple QuickTime是一款流行的多媒体播放器，支持多种媒体格式。 QuickTime在处理各种媒体格式时存在多个缓冲区溢出漏洞，远程攻击者可能利用这些漏洞通过诱使用户打开处理畸形媒体文件控制用户机器。 具体条目如下： QuickTime处理3GP视频文件时存在整数溢出。如果用户受骗打开了恶意的电影的话，就会触发这个溢出，导致拒绝服务或执行任意代码。（CVE-2007-0711） QuickTime处理MIDI文件时存在堆溢出。如果用户受骗打开了恶意的MIDI文件的话，就会触发这个溢出，导致拒绝服务或执行任意代码。（CVE-2007-0712）...

Apple QuickTime PICT heap buffer overflow

Overview The Apple QuickTime player contains a heap buffer overflow vulnerability. This vulnerability may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description PICT is a graphics file format that was used by Apple Macintosh systems prior to OS X as their...

CVE-2007-0715

Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PICT file...

Heap overflow

Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PICT file...

CVE-2007-0715

Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PICT file...

CVE-2007-0588

The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption ...

Memory corruption

The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption ...

CVE-2007-0588

Apple QuickDraw in Mac OS X

Memory corruption

The GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PICT image with a malformed Alpha RGB ARGB...

CVE-2007-0462

The GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PICT image with a malformed Alpha RGB ARGB...

MOAB-23-01-2007: Apple QuickDraw GetSrcBits32ARGB() Memory Corruption Vulnerability

Summary Apple describes QuickDraw as follows: ...a collection of system software routines that your application can use to perform most image-manipulation operations on Macintosh computers. QuickDraw is integrated in Mac OS X since very early versions, used by Quicktime and any other application...

Apple QuickDraw libraries memory corruption

Memory corruption on maleformed PICT image ARGB record...

Apple Mac OSX 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption

source: https://www.securityfocus.com/bid/22207/info Mac OS X QuickDraw is prone to a remote memory-corruption vulnerability because the software fails to properly handle malformed PICT image files. Successfully exploiting this issue allows remote attackers to corrupt memory and crash the affecte...

Apple Mac OSX 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption

Apple Mac OSX 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption source: https://www.securityfocus.com/bid/22207/info Mac OS X QuickDraw is prone to a remote memory-corruption vulnerability because the software fails to properly handle malformed PICT image files. Successfully exploiting...