CVE-2011-3250: Undefined Security Weakness

Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with JPEG2000 encoding...

CVE-2011-3251: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted TKHD atoms in a QuickTime movie file...

CVE-2011-3247: Undefined Security Weakness

Integer overflow in Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PICT file...

CVE-2011-3249: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with FLC encoding...

Apple Quicktime PnPixPat PatType 3 Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple's QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Apple QuickTime FLC RLE Packet Count Decompression Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

Apple QuickTime FLC Delta Decompression Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

Apple QuickTime Atom Hierarachy Argument Size Mismatch Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Apple Quicktime Empty URL Data Handler Remote Code Execution Vulnerability

This vulnerability allows remote attackers to potentially disclose memory addresses on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Apple QuickTime H264 Matrix Conversion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

Apple Mac OS X CoreMedia H.264编码视频文件缓冲区溢出漏洞

BUGTRAQ ID: 50068 CVE ID: CVE-2011-3219 Mac OS X是苹果家族机器所使用的操作系统。 Apple Mac OS X在实现上存在缓冲区溢出漏洞，此漏洞可影响CoreMedia组件，允许攻击者以当前用户权限执行任意代码。 当解析H.264流的Sequence Parameter Set数据时，会读取帧剪裁偏移字段，当这些字段包含错误数据时，Quicktime会最终在视频流所分配的缓冲区之外写入，造成任意代码执行。 Apple Mac OS X 10.x Apple MacOS X Server 10.6.x 厂商补丁： Apple -----...

Apple Releases QuickTime 7.7.1

Apple has released QuickTime 7.7.1 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or obtain sensitive information. US-CERT encourages users and administrators to review Apple Support Article HT5016 a...

QuickTime < 7.7.1 Multiple Vulnerabilities

Binary data 801196.prm...

QuickTime < 7.7.1 Multiple Vulnerabilities

Binary data 6052.prm...

PT-2011-4343

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via crafted TKHD atoms in a QuickTime movie fil...

PT-2011-4342

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with JPEG2000 encoding. This can lead to an application crash. Recommendation...

PT-2011-4341

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with FLC encoding. This can lead to an application crash. Recommendations For...

PT-2011-4339

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1 Description The issue is related to an integer overflow in Apple QuickTime, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted PICT file. This can lead to...

PT-2011-4340

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1 Description The issue is related to an integer signedness error that allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. This can be achieve...

Apple Quicktime Advanced Audio Codec Frame Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. Authentication is not required to exploit this vulnerability. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...