CVE-2005-2267: Undefined Security Weakness

Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone...

Standalone applications can run arbitrary code through the browser — Mozilla

Several media players, for example Flash and QuickTime, support scripted content with the ability to open URLs in the default browser. The default behavior for Firefox was to replace the currently open browser window's content with the externally opened content. If the external URL was a...

Quicktime < 7.0.1 Quartz Composer Information Disclosure (Mac OS X)

The remote Mac OS X host is running a version of Quicktime 7 which is older than Quicktime 7.0.1. The remote version of this software is vulnerable to an information disclosure flaw when handling Quartz Composer files which may leak data to an arbitrary web location. To exploit this flaw, an...

CVE-2005-1579

Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition .qtz file that uses certain patches to read local information, then other patches to send the information to the attacker...

CVE-2005-1579

CVE-2005-1579 affects Apple QuickTime Player 7.0 on Mac OS X 10.4, enabling information disclosure via a specially crafted .mov containing a Quartz Composer (.qtz) file that uses patches to read local data and send it to an attacker. The vulnerability is described in multiple sources, with a work...

CVE-2005-1579: Undefined Security Weakness

Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition .qtz file that uses certain patches to read local information, then other patches to send the information to the attacker...

Apple Quartz Composer / QuickTime 7 information leak

It's possible to determine system facilities...

[DR018] Quartz Composer / QuickTime 7 information leakage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The canonical URI of this advisory is http://remahl.se/david/vuln/ 018/. This advisory concerns an as-yet unpatched problem in QuickTime 7 on Mac OS X 10.4. The reason for disclosure before a vendor patch is that another person realized the potential...

Quicktime < 7.0.1 Web Plugin Information Disclosure

Binary data 2899.prm...

CVE-2005-1106

PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service application crash via a GIF image with the maximum depth start value, possibly triggering an integer overflow...

CVE-2005-0903

Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service application crash via a JPEG file with crafted Huffman Table marker DHT data...

CVE-2005-1106

PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service application crash via a GIF image with the maximum depth start value, possibly triggering an integer overflow...

CVE-2005-1106

The CVE-2005-1106 issue affects Apple QuickTime PictureViewer on Windows (6.5.2). A GIF image with the maximum depth start value can cause the application to crash, due to an integer overflow in GIF processing. This yields a denial of service; no explicit remediation is provided in the supplied d...

CVE-2005-1106: Undefined Security Weakness

PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service application crash via a GIF image with the maximum depth start value, possibly triggering an integer overflow...

CVE-2005-0903

CVE-2005-0903 is a concrete vulnerability in Apple QuickTime PictureViewer (versions around 6.5.1, with advisories noting 6.5.2 as a fix). The issue is a buffer overflow in the PictureViewer component when parsing JPEG images containing crafted Huffman Table (DHT) data, enabling remote denial of ...

CVE-2005-0903

Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service application crash via a JPEG file with crafted Huffman Table marker DHT data...

CVE-2005-0903: Undefined Security Weakness

Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service application crash via a JPEG file with crafted Huffman Table marker DHT data...

QuickTime malformed JPEG buffer overflow

When fuzzing some application with malformed input files, if we want to discover some vulnerability we have to create input file which is very close to valid file but yet malformed in some way. In that way chances for discovery are greater. Now let's play with JPEG format. We concentrate on Huffm...

Apple QuickTime JPEG buffer overflow

Buffer overflow on JPEG format parsing...

QuickTime < 6.5.2 PictureViewer Malformed JPEG Overflow (Windows)

The remote host is using QuickTime, a popular media player/Plug-in that handles many Media files. The remote version of this software contains a buffer overflow vulnerability in its PictureViewer that could allow an attacker to execute arbitrary code on the remote host. To exploit this...