3362 matches found
CVE-2003-0055
CVE-2003-0055 refers to a buffer overflow in the MP3 Broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1. The overflow can be triggered by a filename longer than 256 bytes, potentially allowing a remote attacker to execute arbitrary code ...
CVE-2004-0169
CVE-2004-0169 concerns QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2. The vulnerability arises when processing RTSP DESCRIBE requests with overly long User-Agent fields, triggering an Assert in BufferIsFull and potentially crashing the server. Multiple sources corroborate that remote at...
CVE-2003-0052
CVE-2003-0052 applies to Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1, where parse_xml.cgi allows remote attackers to list arbitrary directories due to unvalidated input. Public sources (ATstake advisory, vendor notices) describe it as a directory-listin...
CVE-2003-0050: Undefined Security Weakness
parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters...
CVE-2003-0053: Undefined Security Weakness
Cross-site scripting XSS vulnerability in parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message...
CVE-2003-0051: Undefined Security Weakness
parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter...
CVE-2003-0055: Undefined Security Weakness
Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename...
CVE-2003-0054: Undefined Security Weakness
Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed usin...
CVE-2004-0169: Undefined Security Weakness
QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service crash via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function...
CVE-2003-0052: Undefined Security Weakness
parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories...
CVE-2002-0376: Undefined Security Weakness
Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field...
QuickTime < 7.5 Multiple Vulnerabilities
Binary data 4537.prm...
QuickTime < 7.6.2 Multiple Vulnerabilities
Binary data 5042.prm...
CVE-2004-0431
Integer overflow in Apple QuickTime QuickTime.qts before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow...
CVE-2004-0431
CVE-2004-0431 concerns Apple QuickTime (QuickTime.qts) before 6.5.1. The vulnerability is an integer overflow in the Sample-to-Chunk table handling that can overflow a heap and enable arbitrary code execution when a user opens a malicious QuickTime file. Affected component is QuickTime.qts in Qui...
CVE-2004-0431
Integer overflow in Apple QuickTime QuickTime.qts before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow...
CVE-2004-0431: Undefined Security Weakness
Integer overflow in Apple QuickTime QuickTime.qts before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow...
QuickTime < 6.5.1 .mov File sample-to-chunk Table Data Handling Overflow (Windows)
The remote host is using QuickTime, a popular media player/Plug-in that handles many Media files. This version has a Heap overflow that could allow an attacker to execute arbitrary code on this host, with the rights of the user running QuickTime. This script was written by Jeff Adams See the Ness...
Apple QuickTime contains an integer overflow in the "QuickTime.qts" extension
Overview Apple QuickTime contains an integer overflow vulnerability in the "QuickTime.qts" extension, which could result in arbitrary code execution. Description Apple's QuickTime Player is a player that allow users to view local and remote audio/video content. Other applications, such as web...
