CVE-2012-0664

Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted text track in a movie file...

CVE-2012-0663

Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TeXML file...

CVE-2012-0670

Apple QuickTime is affected by CVE-2012-0670 due to an integer overflow in the handling of the 'sean' atom in movie files, affecting QuickTime prior to 7.7.2. The vulnerability allows remote code execution or a crash when a crafted file is opened. According to ZDI, Apple issued an update (HT5261)...

CVE-2012-0265

Stack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted pathname for a file...

CVE-2012-0669

Apple QuickTime on Windows (CVE-2012-0669) has a remote code execution vulnerability in parsing Sorenson SVQ3 streams. The flaw can cause arbitrary code execution via a crafted movie file; exploit requires user interaction (e.g., opening a malicious file or visiting a malicious page). The issue i...

CVE-2012-0664

CVE-2012-0664 affects Apple QuickTime on Windows prior to version 7.7.2. It is a heap-based buffer overflow in QuickTime’s handling of text tracks in a movie file, exploited via a crafted text track to execute arbitrary code or crash the application. Apple’s advisory notes QuickTime 7.7.2 as the ...

PT-2012-2771

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.2 Description The issue is related to a heap-based buffer overflow that can be triggered by a crafted text track in a movie file, allowing remote attackers to execute arbitrary code or cause the applicatio...

PT-2012-2772

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.2 Description The issue is related to a heap-based buffer overflow that can be triggered by a crafted movie file with H.264 encoding, potentially allowing remote attackers to execute arbitrary code or caus...

CVE-2012-0265: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted pathname for a file...

CVE-2012-0663: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TeXML file...

CVE-2012-0665: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

CVE-2012-0667: Undefined Security Weakness

Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted QTVR movie file...

CVE-2012-0670: Undefined Security Weakness

Integer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted sean atom in a movie file...

CVE-2012-0668: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with RLE encoding...

CVE-2012-0663 Apple Quicktime Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Recent assessments: wchen-r7 at September 12, 20...

CVE-2012-0664: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted text track in a movie file...

CVE-2012-0666: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted QTMovie object...

CVE-2012-0671: Improper Control of Generation of Code

Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted .pict file...

Apple Releases QuickTime 7.7.2

Apple has released QuickTime 7.7.2 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review Apple Support Article HT5261 and apply any necessary updates ...

QuickTime < 7.7.2 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.7.2 and may be affected by the following vulnerabilities : - An uninitialized memory access issue exists in the handling of MP4 encoded files. CVE-2011-3458 - An off-by-one buffer overflow exists in the handling of rdrf...