3373 matches found
CVE-2011-3218
CVE-2011-3218 affects Apple QuickTime (Mac OS X up to 10.6.8). The vulnerability is in QuickTime Player’s Save for Web export, where exported HTML documents can reference an HTTP script file. An attacker controlling a local or networked environment could spoof the HTTP server during local viewing...
Apple Mac OS X FlashPix文件CVE-2011-3222缓冲区溢出漏洞
Bugtraq ID: 50100 CVE ID：CVE-2011-3222 Apple Mac OS X是苹果公司发布的操作系统。 QuickTime处理FlashPix文件存在缓冲区溢出，构建特制的FLashPix文件可导致未明的应用程序终止或任意代码执行。 Apple Mac OS X Server 10.6.6 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Serve...
CVE-2011-3223: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FLIC movie file...
CVE-2011-3221: Improper Control of Generation of Code
QuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted file...
CVE-2011-3220: Exposure of Sensitive Information to an Unauthorized Actor
QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file...
CVE-2011-3222: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FlashPix file...
CVE-2011-3228: Improper Control of Generation of Code
QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file...
CVE-2011-0224: Improper Control of Generation of Code
CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted QuickTime movie file...
CVE-2011-3218: Improper Neutralization of Input During Web Page Generation
The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...
Apple Ships Mammoth Security Update for OS X
Apple released OS X Lion v10.7.2 yesterday along with an absolutely enormous security update that patches some 80 bugs in the various iterations of Apple’s operating system. One of the patches fixes a highly critical vulnerability that enables an attacker to run code on a remote machine with a...
Mac OS X 10.7.x < 10.7.2 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.2. This version contains numerous security-related fixes for the following components : - Apache - Application Firewall - ATS - BIND - Certificate Trust Policy - CFNetwork - CoreMedia - CoreProcesses - CoreStorage - Fil...
Mac OS X v10.6.4 Multiple Vulnerabilities (2010-007)
This host is missing an important security update according to Mac OS X 10.6.5 Update/Mac OS X Security Update 2010-007 OpenVAS Vulnerability Test $Id: gbmacosxsu10-007.nasl 7052 2017-09-04 11:50:51Z teissa $ Mac OS X v10.6.4 Multiple Vulnerabilities 2010-007 Authors: Madhuri D Copyright: Copyrig...
CVE-2011-0258
Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted image description associated with an mp4v tag in a movie file...
Memory corruption
Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted image description associated with an mp4v tag in a movie file...
CVE-2011-0258
Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted image description associated with an mp4v tag in a movie file...
CVE-2011-0258
CVE-2011-0258 affects Apple QuickTime on Windows. The vulnerability arises in the handling of the mp4v atom within movie files, where an improper allocation/size checking leads to memory corruption and potential remote code execution. Exploitation would require user interaction (e.g., opening a c...
Apple QuickTime 7.6.9 - QuickTimePlayer.dll ActiveX Buffer Overflow
Apple QuickTime 7.6.9 - QuickTimePlayer.dll ActiveX Buffer Overflow source: https://www.securityfocus.com/bid/49465/info Apple QuickTime is prone to a buffer-overflow vulnerability because of a failure to properly bounds-check user-supplied data. Successful exploits will allow attackers to execut...
CVE-2011-0258: Improper Restriction of Operations within the Bounds of a Memory Buffer
Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted image description associated with an mp4v tag in a movie file...
Apple QuickTime 7.6.9 - 'QuickTimePlayer.dll' ActiveX Buffer Overflow
source: https://www.securityfocus.com/bid/49465/info Apple QuickTime is prone to a buffer-overflow vulnerability because of a failure to properly bounds-check user-supplied data. Successful exploits will allow attackers to execute arbitrary code in the context of the currently logged-in user;...
ZDI-11-277: Apple QuickTime 3g2 'mp4v' atom size Remote Code Execution Vulnerability
ZDI-11-277: Apple QuickTime 3g2 'mp4v' atom size Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-277 August 31, 2011 -- CVE ID: CVE-2011-0258 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple QuickTime --...