QuickTime RTSP URL Handler Buffer Overflow (Windows)

A buffer overflow vulnerability exists in the RTSP URL handler in the version of QuickTime installed on the remote host. Using either HTML, JavaScript or a QTL file as an attack vector and an RTSP URL with a long path component, a remote attacker may be able to leverage this issue to execute...

Memory corruption

Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote attackers to execute arbitrary code via a crafted ASFFilePropertiesObject size field in a WMV file, which triggers memory corruption...

CVE-2007-0466

Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote attackers to execute arbitrary code via a crafted ASFFilePropertiesObject size field in a WMV file, which triggers memory corruption...

CVE-2007-0466: Undefined Security Weakness

Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote attackers to execute arbitrary code via a crafted ASFFilePropertiesObject size field in a WMV file, which triggers memory corruption...

CVE-2007-0588

The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption ...

CVE-2007-0588

The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption ...

CVE-2007-0588

Apple QuickDraw in Mac OS X

CVE-2007-0588: Undefined Security Weakness

The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption ...

Telestream Flip4Mac - WMV File Remote Memory Corruption

Telestream Flip4Mac - WMV File Remote Memory Corruption source: https://www.securityfocus.com/bid/22286/info Flip4Mac is prone to a remote memory-corruption vulnerability. Flip4Mac is prone to a remote memory-corruption vulnerability because the application fails to properly handle malformed WMV...

Telestream Flip4Mac - 'WMV' File Remote Memory Corruption

source: https://www.securityfocus.com/bid/22286/info Flip4Mac is prone to a remote memory-corruption vulnerability. Flip4Mac is prone to a remote memory-corruption vulnerability because the application fails to properly handle malformed WMV files. An attacker can exploit this issue to execute...

CVE-2007-0462

The GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PICT image with a malformed Alpha RGB ARGB...

CVE-2007-0462

The GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PICT image with a malformed Alpha RGB ARGB...

CVE-2007-0462

The CVE-2007-0462 entry concerns Apple QuickDraw (used by QuickTime 7.1.3 and other apps on Mac OS X 10.4.8 and earlier) with a memory corruption vulnerability in the _GetSrcBits32ARGB function. A crafted PICT image containing a malformed Alpha RGB (ARGB) record can trigger memory corruption, lea...

CVE-2007-0462: Undefined Security Weakness

The GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PICT image with a malformed Alpha RGB ARGB...

MOAB-23-01-2007: Apple QuickDraw GetSrcBits32ARGB() Memory Corruption Vulnerability

Summary Apple describes QuickDraw as follows: ...a collection of system software routines that your application can use to perform most image-manipulation operations on Macintosh computers. QuickDraw is integrated in Mac OS X since very early versions, used by Quicktime and any other application...

Mac OS X Security Update 2007-001

The remote host is running a version of Mac OS X 10.3 or 10.4 which does not have Security Update 2007-001 applied. This update fixes a flaw in QuickTime which may allow a rogue website to execute arbitrary code on the remote host by exploiting an overflow in the RTSP URL handler. TRUSTED...

Apple QuickTime HREFTrack crossite scripting

Script can refer to local resources. Vulnerability is used in-the-wild for malware code installation...

MOAB-03-01-2007: Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability

Summary A month ago, a vulnerability in QuickTime was exploited to spread a worm in MySpace. The vulnerability was first published by pdp. In his article, pdp describes how HREFTrack attribute in .mov files can be used for malicious scripting. The MySpace worm abused this vulnerability in a...

MOAB-01-01-2007: Apple Quicktime rtsp URL Handler Stack-based Buffer Overflow

Summary The following description of the software is provided by vendor Apple: QuickTime 7 makes the future of video crystal clear with new features including user-friendly controls and pristine H.264 video. Upgrade to QuickTime 7 Pro and capture your own movies, then share them with friends and...

quicktime.py.txt

!/usr/bin/python Port bind exploit for apple quicktime rtsp vulnerability Tested on windows 2000 SP0 and SP4 with quicktime 7.1.3.100. Should be easy to port the exploit to others. All one needs to do is look for the appropriate jump address. Certain characters are not permitted in the shellcode...