Buffer overflow

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FLIC movie file...

Memory corruption

QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file...

Buffer overflow

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FlashPix file...

Cross site scripting

The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...

Memory corruption

CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted QuickTime movie file...

Code injection

QuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted file...

Design/Logic Flaw

QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file...

CVE-2011-3223

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FLIC movie file...

CVE-2011-0224

CVE-2011-0224 affects Apple Mac OS X up to 10.6.8, due to memory corruption in CoreMedia/QuickTime when handling crafted movie files. This can allow remote arbitrary code execution or a denial of service. The issue is addressed by Apple’s security updates (Security Update 2011-006; OS X 10.7.2 an...

CVE-2011-3220

CVE-2011-3220 affects Apple QuickTime. The flaw is an uninitialized memory access in how QuickTime handles URL data handlers within movie files, allowing remote attackers to read memory contents via a crafted file. The issue is tied to QuickTime's atom data handling and can lead to memory disclos...

CVE-2011-3220

QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file...

CVE-2011-0224

CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted QuickTime movie file...

CVE-2011-3228

QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file...

CVE-2011-3221

CVE-2011-3221 affects Apple QuickTime, specifically the parsing of the atom hierarchy in QuickTime movie files. The issue allows remote execution of code in vulnerable installations of QuickTime Player on macOS X prior to 10.7.2 (and related QuickTime components), when a user opens a crafted file...

CVE-2011-3218

The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...

CVE-2011-3223

CVE-2011-3223 affects Apple QuickTime. The vulnerability resides in QuickTime’s FLIC/FLIC movie decoding, specifically the FLC RLE packet handling, where an out-of-bounds write during decompression can lead to remote code execution. Exploitation requires the user to view a malicious file or page,...

CVE-2011-3222

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FlashPix file...

CVE-2011-3221

QuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted file...

CVE-2011-3222

The CVE refers to a buffer overflow in Apple QuickTime for OS X prior to 10.7.2, triggered by a crafted FlashPix file. A remote attacker could execute arbitrary code or cause an application crash. Affected product: Apple QuickTime on macOS X versions earlier than 10.7.2 (OS X Lion). Underlying ca...

CVE-2011-3228

CVE-2011-3228 is part of Apple QuickTime multiple vulnerabilities affecting QuickTime in Windows and macOS. The vulnerability arises from memory corruption in QuickTime’s handling of movie files, leading to remote code execution or a crash. In macOS, affected versions include OS X prior to 10.7.2...