Apple QuickTime STSC atom Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

Apple QuickTime STSZ atom Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

Apple QuickTime Player H.264 Reference Picture List Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Apple Quicktime Media Link src Parameter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

CVE-2011-0256

Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted track run atoms in a QuickTime movie file...

CVE-2011-0257

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow...

Integer overflow

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow...

Integer overflow

Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted track run atoms in a QuickTime movie file...

CVE-2011-0256

Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted track run atoms in a QuickTime movie file...

CVE-2011-0257

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow...

CVE-2011-0256

Apple QuickTime contains an integer overflow in the handling of the TRUN atom (sampleCount) that can be triggered by crafted track run atoms in QuickTime movie files, impacting QuickTime before version 7.7. Exploitation could allow remote code execution or a denial of service (application crash) ...

CVE-2011-0257

CVE-2011-0257 affects Apple QuickTime prior to 7.7. It stems from an integer signedness error in processing PICT PnSize, triggering a stack-based buffer overflow via a crafted PnSize opcode in a PICT file. Consequences documented: remote code execution or a denial of service (application crash). ...

PT-2011-2230

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7 Description The issue is related to an integer overflow in Apple QuickTime, which can be triggered by crafted track run atoms in a QuickTime movie file. This can allow remote attackers to execute arbitrary...

Apple QuickTime PICT文件栈缓冲区溢出漏洞

Bugtraq ID: 49144 CVE ID：CVE-2011-0257 Apple QuickTime是一款流行的多媒体播放器。 Apple QuickTime处理PnSize PICT代码存在缺陷。它把无符号的16位值转换为32位值，此值之后用于内存拷贝函数的大小参数，用于把文件拷贝到栈中。结果可导致基于栈的缓冲区溢出，允许以当前用户上下文执行任意代码。 Apple QuickTime Player 7.6.8 Apple QuickTime Player 7.6.7 Apple QuickTime Player 7.6.6 1671 Apple QuickTime Player...

CVE-2011-0257: Undefined Security Weakness

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow...

CVE-2011-0256: Undefined Security Weakness

Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted track run atoms in a QuickTime movie file...

ZDI-11-250: Apple QuickTime STTS atom Remote Code Execution Vulnerability

ZDI-11-250: Apple QuickTime STTS atom Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-250 August 9, 2011 -- CVE ID: CVE-2011-0252 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- Vulnerability Details...

ZDI-11-251: Apple QuickTime STSS atom Parsing Remote Code Execution Vulnerability

ZDI-11-251: Apple QuickTime STSS atom Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-251 August 9, 2011 -- CVE ID: CVE-2011-0250 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointT...

Apple QuickTime STTS atom Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

Apple QuickTime STSS atom Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...