CVE-2011-3220

QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file...

CVE-2011-3221

QuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted file...

CVE-2011-3222

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FlashPix file...

CVE-2011-3223

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FLIC movie file...

CVE-2011-3228

QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file...

CVE-2011-0224

CVE-2011-0224 affects Apple Mac OS X up to 10.6.8, due to memory corruption in CoreMedia/QuickTime when handling crafted movie files. This can allow remote arbitrary code execution or a denial of service. The issue is addressed by Apple’s security updates (Security Update 2011-006; OS X 10.7.2 an...

CVE-2011-3218

CVE-2011-3218 affects Apple QuickTime (Mac OS X up to 10.6.8). The vulnerability is in QuickTime Player’s Save for Web export, where exported HTML documents can reference an HTTP script file. An attacker controlling a local or networked environment could spoof the HTTP server during local viewing...

CVE-2011-3220

CVE-2011-3220 affects Apple QuickTime. The flaw is an uninitialized memory access in how QuickTime handles URL data handlers within movie files, allowing remote attackers to read memory contents via a crafted file. The issue is tied to QuickTime's atom data handling and can lead to memory disclos...

CVE-2011-3221

CVE-2011-3221 affects Apple QuickTime, specifically the parsing of the atom hierarchy in QuickTime movie files. The issue allows remote execution of code in vulnerable installations of QuickTime Player on macOS X prior to 10.7.2 (and related QuickTime components), when a user opens a crafted file...

CVE-2011-3222

The CVE refers to a buffer overflow in Apple QuickTime for OS X prior to 10.7.2, triggered by a crafted FlashPix file. A remote attacker could execute arbitrary code or cause an application crash. Affected product: Apple QuickTime on macOS X versions earlier than 10.7.2 (OS X Lion). Underlying ca...

CVE-2011-3223

CVE-2011-3223 affects Apple QuickTime. The vulnerability resides in QuickTime’s FLIC/FLIC movie decoding, specifically the FLC RLE packet handling, where an out-of-bounds write during decompression can lead to remote code execution. Exploitation requires the user to view a malicious file or page,...

CVE-2011-3228

CVE-2011-3228 is part of Apple QuickTime multiple vulnerabilities affecting QuickTime in Windows and macOS. The vulnerability arises from memory corruption in QuickTime’s handling of movie files, leading to remote code execution or a crash. In macOS, affected versions include OS X prior to 10.7.2...

Apple Mac OS X FlashPix文件CVE-2011-3222缓冲区溢出漏洞

Bugtraq ID: 50100 CVE ID：CVE-2011-3222 Apple Mac OS X是苹果公司发布的操作系统。 QuickTime处理FlashPix文件存在缓冲区溢出，构建特制的FLashPix文件可导致未明的应用程序终止或任意代码执行。 Apple Mac OS X Server 10.6.6 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Serve...

PT-2011-4311

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions through 10.6.8 Description The issue allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks. This occurs when the "Save for Web" selection in QuickTime Player exports HTML documents containing an...

PT-2011-4314

Name of the Vulnerable Software and Affected Versions QuickTime in Apple Mac OS X versions prior to 10.7.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, specifically an application crash, by utilizing a crafted file that improperly handles t...

PT-2011-4316

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted FLIC movie file. This is due to a buffer overflow in QuickTime. Recommendations For...

PT-2011-4313

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.2 Description The issue allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file, due to improper processing of URL data handlers in movie files by...

PT-2011-4315

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted FlashPix file. This is related to a buffer overflow in QuickTime. Recommendations For...

PT-2011-2202

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted QuickTime movie file. Recommendations For Apple Mac OS X versio...

CVE-2011-3218: Improper Neutralization of Input During Web Page Generation

The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...