Integer overflow

Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

Integer overflow

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted panorama atom in a QuickTime Virtual Reality QTVR movie file...

CVE-2010-3800

CVE-2010-3800 affects Apple QuickTime prior to 7.6.9, where a memory corruption in handling PICT files can lead to arbitrary code execution or a crash. The issue arises from inadequate validation during PICT processing, enabling remote exploitation. Apple released patches addressing this in Quick...

CVE-2010-0530

Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive information by reading files in this directory...

CVE-2010-1508

Heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted Track Header aka tkhd atoms...

CVE-2010-3801

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted FlashPix file...

CVE-2010-4009

Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

CVE-2010-0530

Summary: CVE-2010-0530 affects Apple QuickTime on Windows up to version 7.6.9. A filesystem permissions issue in the user profile’s Apple Computer directory allows a local user to read sensitive files. Affected software (from sources): QuickTime on Windows before 7.6.9. Root cause (as stated): We...

CVE-2010-1508

CVE-2010-1508 describes a heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows, triggered by parsing Track Header (tkhd) atoms and potentially allowing arbitrary code execution or a crash. OpenVAS notes the issue affects Windows QuickTime and does not affect Mac OS X. Secunia’s a...

CVE-2010-3801

CVE-2010-3801 affects Apple QuickTime prior to 7.6.9. A crafted FlashPix file can cause memory corruption leading to remote code execution or a denial of service. The issue is addressed by QuickTime/Apple security updates; Apple cites QuickTime 7.6.9 as the fix for Mac OS X (and related Security ...

CVE-2010-4009

CVE-2010-4009 affects Apple QuickTime prior to 7.6.9. An integer overflow in QuickTime’s handling of movie files can allow a remote attacker to execute arbitrary code or crash the application. Impact is rated high (AV:N/AC:M/Au:N/C:C/I:C/A:C). Remediation: upgrade to QuickTime 7.6.9 or later as r...

CVE-2010-3802

CVE-2010-3802 affects Apple QuickTime prior to 7.6.9. It is a memory-corruption/remote-code-execution risk caused by a signedness error in handling a crafted panorama atom in a QuickTime VR (QTVR) movie. Exploitation could lead to arbitrary code execution or an application crash. Remediation indi...

CVE-2010-3802

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted panorama atom in a QuickTime Virtual Reality QTVR movie file...

CVE-2010-3800

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PICT file...

Apple QuickTime for Windows文件系统权限本地信息泄露漏洞

BUGTRAQ ID: 45237 CVE ID: CVE-2010-0530 Apple QuickTime是一款非常流行的多媒体播放器。 Apple QuickTime在实现上存在漏洞，攻击者可利用此漏洞获取敏感信息，访问用户配置文件中"Apple Computer" 目录下的内容。 此漏洞源于文件系统权限问题。 Apple QuickTime Player 5.0.2 - 7.6.8 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

PT-2010-5235

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue is related to an integer overflow that can be triggered by a crafted movie file, allowing remote attackers to execute arbitrary code or cause the application to crash. Recommendatio...

PT-2010-2288

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue allows local users to obtain sensitive information by reading files in the Apple Computer directory within a user's profile due to weak permissions set by Apple QuickTime...

CVE-2010-1508: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted Track Header aka tkhd atoms...

CVE-2010-3801: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted FlashPix file...

CVE-2010-0530: Undefined Security Weakness

Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive information by reading files in this directory...