CVE-2013-1032

CVE-2013-1032 affects Apple QuickTime on Mac OS X (before 10.8.5). The issue is a memory corruption vulnerability in the processing of the QuickTime atom ‘idsc’ within movie files, which can enable remote code execution or cause a denial of service when a crafted file is opened. Several sources c...

Mac OS X 10.8 < 10.8.5 Multiple Vulnerabilities (Security Update 2013-004)

Binary data 8008.prm...

CVE-2013-1032: Out-of-bounds Write

QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted idsc atom in a QuickTime movie file...

Mac OS X 10.8.x < 10.8.5 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.5. The newer version contains multiple security-related fixes for the following components : - Apache - Bind - Certificate Trust Policy - CoreGraphics - ImageIO - Installer - IPSec - Kernel - Mobile Device Management -...

Apple QuickTime MPEG-2 Playback Component Code Execution

The remote host contains a copy of the QuickTime MPEG-2 playback component, a commercial add-on to QuickTime distributed by Apple. The remote version of this software is vulnerable to a remote code execution vulnerability. To exploit this flaw, an attacker would need to entice a user to view or...

Apple QuickTime 畸形MOV文件处理缓冲区溢出漏洞(CVE-2013-1017)

BUGTRAQ ID: 60097 CVECAN ID: CVE-2013-1017 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 Windows 7/Vista/XP平台上的QuickTime 7.7.4没有正确处理Alis记录内的如'rdrf'或'dref'的某些元素的数据长度，特制的.mov文件即可触发缓冲区溢出，造成任意代码执行。 0 Apple Quicktime 7.7.4 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5770）以及相应补丁:...

QuickTime Movie File dref Atom Handling Buffer Overflow

Added: 08/01/2013 CVE: CVE-2013-1017 BID: 60097 OSVDB: 93625 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime before 7.7.4 is vulnerable to remote code execution due to a failure to perform appropriate validation of user supplied input. A remote...

QuickTime Movie File dref Atom Handling Buffer Overflow

Added: 08/01/2013 CVE: CVE-2013-1017 BID: 60097 OSVDB: 93625 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime before 7.7.4 is vulnerable to remote code execution due to a failure to perform appropriate validation of user supplied input. A remote...

QuickTime Movie File dref Atom Handling Buffer Overflow

Added: 08/01/2013 CVE: CVE-2013-1017 BID: 60097 OSVDB: 93625 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime before 7.7.4 is vulnerable to remote code execution due to a failure to perform appropriate validation of user supplied input. A remote...

QuickTime Movie File dref Atom Handling Buffer Overflow

Added: 08/01/2013 CVE: CVE-2013-1017 BID: 60097 OSVDB: 93625 Background QuickTime is a media player for Windows and Mac OS platforms. Problem Apple QuickTime before 7.7.4 is vulnerable to remote code execution due to a failure to perform appropriate validation of user supplied input. A remote...

Apple QuickTime 7 - Invalid Atom Length Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit4 "Apple Quicktime 7...

Apple Quicktime 7 Invalid Atom Length Buffer Overflow

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit4 "Apple Quicktime 7 Invalid Atom Length Buffer Overflow", 'Description' = %q This module exploits a vulnerability found in Apple Quicktime. The flaw is triggered when Quicktime fails to properly handle th...

Apple Quicktime 7 Invalid Atom Length Buffer Overflow Vulnerability

This Metasploit module exploits a vulnerability found in Apple Quicktime. The flaw is triggered when Quicktime fails to properly handle the data length for certain atoms such as 'rdrf' or 'dref' in the Alis record, which may result a buffer overflow by loading a specially crafted .mov file, and...

Apple Quicktime 7 Invalid Atom Length Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit4 "Apple Quicktime 7...

Oracle Linux 3 : gstreamer-plugins (ELSA-2009-0269)

From Red Hat Security Advisory 2009:0269 : Updated gstreamer-plugins packages that fix one security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The gstreamer-plugins package contains...

Oracle Linux 4 : gstreamer-plugins (ELSA-2009-0270)

From Red Hat Security Advisory 2009:0270 : Updated gstreamer-plugins packages that fix one security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The gstreamer-plugins package contains...

Oracle Linux 5 : gstreamer-plugins-good (ELSA-2009-0271)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0271 advisory. 0.10.9-1.el5.1 - Add patch for CVE-2009-0386 CVE-2009-0387 CVE-2009-0397 Related: rhbz 483220 Tenable has extracted the preceding description block...

Mac OS X Multiple Vulnerabilities (Security Update 2013-003)

The remote host is running a version of Mac OS X 10.6, 10.7, or 10.8 that does not have Security Update 2013-003 applied. This update contains several security-related fixes for the following component : - QuickTime Successful exploitation of these issues could result in arbitrary code execution....

Apple QuickTime TeXML textBox Element Memory Corruption (CVE-2013-1015)

A memory corruption vulnerability exists in Apple QuickTime. The vulnerability is due to insufficient validation of coordinate values in textBox and defaultTextBox in QuickTime TeXML files. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to process a malicious...

Apple QuickTime PICT Image LongComment Opcode Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way QuickTim...