CVE-2010-3794: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of FlashPix image data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FlashPix file...

CVE-2010-3790: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file that causes an image sample transformation to scale a sprite outside a buffer boundary...

CVE-2010-3788: Improper Input Validation

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of JP2 image data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JP2 file...

CVE-2010-3789: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted AVI file...

CVE-2010-3792: Undefined Security Weakness

Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG movie file...

CVE-2010-3791: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG movie file...

Amnesty International Site Found Hosting Malware, IE Zero Day

Researchers at security firm Websense have found that Amnesty International’s Hong Kong site, amnesty.org.hk, is serving up a cocktail of malware that includes last week’s Internet Explorer 0-day. Visitors to the human rights organization’s site operating versions 6 and 7 of IE are being targeted...

Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities

Binary data 5705.prm...

Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities

Versions of Mac OS X 10.6 earlier than 10.6.5 are potentially affected by multiple vulnerabilities. Mac OS X 10.6.5 contains security fixes for the following products : - AFP Server - Apache modperl - Apache - AppKit - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services -...

PT-2010-5076

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted AVI file. This is related t...

PT-2010-5075

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 QuickTime in Apple Mac OS X version 10.6.x before 10.6.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted JP2 file, due to QuickTim...

PT-2010-5080

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 QuickTime versions prior to 10.6.5 Description The issue is caused by an array-indexing error when parsing Sorenson Video 3 content, which can lead to memory corruption during decompression via a...

PT-2010-5082

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 QuickTime in Apple Mac OS X version 10.6.x before 10.6.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted GIF file, due to QuickTim...

PT-2010-5081

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 QuickTime version not specified, but affected in Mac OS X 10.6.x before 10.6.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted...

PT-2010-5078

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MPEG movie file. This is due to a buffer overflow in QuickTime. Recommendations Fo...

PT-2010-5079

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 Apple QuickTime affected versions not specified Description The issue is related to an integer signedness error in QuickTime, allowing remote attackers to execute arbitrary code or cause a denial o...

Apple Quicktime rec Chunk Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the code...

Apple QuickTime FlashPix Max Uninitialized Jpeg Table Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple's QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Apple Quicktime Sorenson Video Codec Decoding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple's Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way...

Apple QuickTime GIF LZW Decompression Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required in that a target must open a malicious media file or visit a malicious page. The specific flaw exists within the application's implementation of the LZ...