PBS Website Compromised, Used to Serve Exploits

Some sections of the popular PBS.org Web site have been hijacked by hackers serving up a cocktail of dangerous exploits. According to researchers at Purewire, attempts to access certain PBS Web site pages yielded JavaScript that serves exploits from a malicious domain via an iframe. The malicious...

iPhone, QuickTime Bitten by Serious Security Bugs

Apple has released security patches to cover serious security vulnerabilities in its iPhone, iPod Touch and QuickTime products. The most serious of the vulnerabilities could lead to remote code execution attacks that give malicious hackers an easy way to hijack computers and mobile devices. Read...

Apple QuickTime Multiple Vulnerabilities (Sep 2009)

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

Apple QuickTime Multiple Vulnerabilities - Sep09

The host is installed with Apple QuickTime and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplequicktimemultvulnsep09.nasl 5055 2017-01-20 14:08:39Z teissa $ Apple QuickTime Multiple Vulnerabilities - Sep09 Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

Apple QuickTime multiple security vulnerabilities

Buffer overflow on MPEG-4, H.264 and FlashPix data parsing...

About the security content of QuickTime 7.6.4

About the security content of QuickTime 7.6.4 Last Modified: September 09, 2009 Article: HT3859 Summary This document describes the security content of QuickTime 7.6.4. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has...

ZDI-09-064: Apple QuickTime FlashPix Sector Size Overflow Vulnerability

ZDI-09-064: Apple QuickTime FlashPix Sector Size Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-064 September 10, 2009 -- CVE ID: CVE-2009-2798 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

CVE-2009-2203

Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG-4 video file...

CVE-2009-2799

Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted H.264 movie file...

CVE-2009-2202

Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted H.264 movie file...

CVE-2009-2798

Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FlashPix file...

CVE-2009-2203

Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG-4 video file...

CVE-2009-2202

Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted H.264 movie file...

Memory corruption

Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted H.264 movie file...

Heap overflow

Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FlashPix file...

Heap overflow

Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted H.264 movie file...

Buffer overflow

Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG-4 video file...

CVE-2009-2202

Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted H.264 movie file...

CVE-2009-2203

Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG-4 video file...

CVE-2009-2798

Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FlashPix file...