CVE-2010-4009: Undefined Security Weakness

Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

CVE-2010-3800: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PICT file...

PT-2010-5235

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue is related to an integer overflow that can be triggered by a crafted movie file, allowing remote attackers to execute arbitrary code or cause the application to crash. Recommendatio...

Apple Releases QuickTime 7.6.9

Apple has released QuickTime 7.6.9 to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or obtain sensitive information. US-CERT encourages users and administrators to review Apple article...

Apple QuickTime JPEG2000 heap buffer overflow

Overview Apple QuickTime contains a heap buffer overflow in the processing of JPEG2000 data, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple's QuickTime Player is multimedia software that allows users to view local and remote...

QuickTime < 7.6.9 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.9. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of JP2 images may lead to an application crash or arbitrary code execution. CVE-2010-3787 - Uninitialized memory...

QuickTime < 7.6.9 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.6.9. Such versions contain several vulnerabilities : - A filesystem permission issue may allow a local user on a Windows system to access the contents of the 'Apple Computer' directory in the user's profile. CVE-2010-05...

PT-2010-5087

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted FlashPix file. Recommendations Fo...

QuickTime < 7.6.9 Multiple Vulnerabilities

Binary data 801191.prm...

QuickTime < 7.6.9 Multiple Vulnerabilities

Binary data 5725.prm...

PT-2010-5086

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted PICT file. This is related to the...

PT-2010-3183

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue is related to a heap-based buffer overflow that can be triggered by crafted Track Header aka tkhd atoms, allowing remote attackers to execute arbitrary code or cause a denial of...

Apple QuickTime PICT directBitsRect Pack3 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Apple QuickTime PICT File PackBits Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the application'...

Apple QuickTime 3GP Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Quicktime.qt...

Apple QuickTime Panorama Atom Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that a user must be coerced into visiting a malicious page or opening a malicious file. The specific flaw exists withi...

Apple QuickTime FPX Subimage Count Out-of-bounds Counter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required in that a user must be coerced into opening up a malicious document or visiting a malicious website. The specific flaw exists within the way the...

PT-2010-5088

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue is related to an integer signedness error that can be triggered by a crafted panorama atom in a QuickTime Virtual Reality QTVR movie file. This can lead to memory corruption and...

Secunia Research: QuickTime Sorenson Video 3 Array-Indexing Vulnerability

====================================================================== Secunia Research 11/11/2010 - QuickTime Sorenson Video 3 Array-Indexing Vulnerability - ====================================================================== Table of Contents Affected...

Apple QuickTime Sorenson编码电影文件内存破坏漏洞

BUGTRAQ ID: 44789 CVE ID: CVE-2010-3793 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime在解析Sorenson Video 3内容时存在数组索引错误，用户受骗打开了特制的电影文件就可能触发内存破坏，导致执行任意代码。 Apple QuickTime Player 7.6.8 Apple QuickTime Player 7.6.6 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com/support/downloads/...