3362 matches found
Look at the video and audio de-zero loophole
Look Video is an online video player. A de-zero vulnerability exists in the handling of certain mov format files, which can be exploited by attackers to cause a denial of service attack...
Apple QuickTime Multiple Vulnerabilities (HT203092) - Windows
Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...
CVE-2017-13823
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "QuickTime" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...
CVE-2017-13807
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory consumption via a crafted QuickTime file...
CVE-2017-13823
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "QuickTime" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...
CVE-2017-13807
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory consumption via a crafted QuickTime file...
Design/Logic Flaw
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "QuickTime" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...
Code injection
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory consumption via a crafted QuickTime file...
CVE-2017-13823
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "QuickTime" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...
CVE-2017-13807
CVE-2017-13807 affects macOS High Sierra before 10.13.1, in the Audio path. A remote attacker could craft a QuickTime file to trigger arbitrary code execution or memory consumption (DoS). Root cause: memory handling issue in Audio when parsing QuickTime content. A patch is available in 10.13.1 Se...
CVE-2017-13823
CVE-2017-13823 affects macOS prior to 10.13.1, specifically the QuickTime component, enabling bypass of memory-read restrictions via a crafted app. The issue is documented by Apple in the macOS High Sierra 10.13.1 security update (HT208221) and listed among affected components; Apple notes the up...
CVE-2017-13807
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory consumption via a crafted QuickTime file...
CVE-2017-13823: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "QuickTime" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...
CVE-2017-13807: Improper Input Validation
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory consumption via a crafted QuickTime file...
macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-001 and 2017-004)
The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components : - 802.1X - apache - AppleScript - ATS - Audio - CFString - CoreText - curl - Dictionary Widget - file - Font...
Apple macOS High Sierra Audio code execution vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple Inc. for Mac computers.Audio is one of the audio components of the system. A security vulnerability exists in the Audio component of Apple macOS High Sierra versions prior to 10.13.1. A remote attacker can exploit this...
Apple macOS High Sierra QuickTime Address Bar Deception Vulnerability
Apple macOS High Sierra is a proprietary operating system developed by Apple Inc. for Mac computers.QuickTime is one of the multimedia playback components. A security vulnerability exists in the QuickTime component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this...
Memory Corruption Vulnerability in Storm Video 5 PC Client (CNVD-2017-35532)
Storm Video 5 is a video player from Beijing Storm Technology Co. A memory corruption vulnerability exists when opening certain MOV files in the Storm Video player, which can be exploited by an attacker to cause a denial of service...
About the security content of macOS High Sierra 10.13
About the security content of macOS High Sierra 10.13 This document describes the security content of macOS High Sierra 10.13. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...