CVE-2011-0246

Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted GIF file...

Apple Releases QuickTime 7.7

Apple has released QuickTime 7.7 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review Apple Support Article HT4826 and apply any necessary updates to...

QuickTime < 7.7 Multiple Vulnerabilities

Binary data 801184.prm...

QuickTime < 7.7 Multiple Vulnerabilities

Binary data 6000.prm...

CVE-2011-0246: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted GIF file...

CVE-2011-0247: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Apple QuickTime before 7.7 on Windows allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted H.264 movie...

CVE-2011-0248: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted QTL file...

CVE-2011-0249: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted STSC atoms in a QuickTime movie file...

CVE-2011-0252: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted STTS atoms in a QuickTime movie file...

CVE-2011-0245: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted pict file...

CVE-2011-0251: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted STSZ atoms in a QuickTime movie file...

CVE-2011-0250: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted STSS atoms in a QuickTime movie file...

QuickTime < 7.7 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.7. As such, it reportedly may be affected by the following vulnerabilities : - A buffer overflow in QuickTime's handling of pict files may lead to an application crash or arbitrary code execution. CVE-2011-0245 - A buff...

QuickTime < 7.7 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.7. As such, it reportedly may be affected by the following vulnerabilities : - A buffer overflow in QuickTime's handling of pict files may lead to an application crash or arbitrary code execution. CVE-2011-0245 - A...

PT-2011-2226

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7 Description The issue is related to a heap-based buffer overflow that can be triggered by crafted STTS atoms in a QuickTime movie file, allowing remote attackers to execute arbitrary code or cause a denial...

PT-2011-2224

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7 Description The issue is related to a heap-based buffer overflow that can be triggered by crafted STSS atoms in a QuickTime movie file, allowing remote attackers to execute arbitrary code or cause a denial...

PT-2011-2221

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7 Description The issue is related to multiple stack-based buffer overflows in Apple QuickTime, which can be exploited by remote attackers via a crafted H.264 movie. This can lead to the execution of arbitra...

PT-2011-2222

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7 Description The issue is related to a stack-based buffer overflow in the QuickTime ActiveX control when used with Internet Explorer, allowing remote attackers to execute arbitrary code or cause a denial of...

PT-2011-2220

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7 Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted GIF file. Recommendations For Apple QuickTime versions prior to...

PT-2011-2225

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7 Description The issue is related to a heap-based buffer overflow that can be triggered by crafted STSZ atoms in a QuickTime movie file, allowing remote attackers to execute arbitrary code or cause a denial...