CVE-2014-4979

Apple QuickTime for Windows is affected by CVE-2014-4979 due to memory corruption in the mvhd atom when handling malformed version numbers and flags, potentially enabling arbitrary code execution or a crash. The issue is addressed in QuickTime 7.7.6, per the Apple security content; updating to th...

CVE-2014-4979

Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed version number and flags in an mvhd atom...

CVE-2014-4979: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed version number and flags in an mvhd atom...

KLA10442 DoS vulnerability in QuickTime

An unknown vulnerability have been found in Apple QuickTime. Vulnerability can be exploited remotely via specially designed mvhd atom. Original advisories Apple bulletin Exploitation Related products Apple-QuickTime CVE list CVE-2014-4979 critical Solution Update to latest version Quicktime...

(0Day) Apple QuickTime 'mvhd' Atom Heap Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the 'mvhd' atom...

Apple QuickTime 6/7 FLC Movie COLOR_64 Chunk Overflow

No description provided by source. source: http://www.securityfocus.com/bid/19976/info Apple QuickTime is prone to multiple vulnerabilities because it fails to properly bounds-check and sanitize user-supplied data. An attacker can exploit these issues to execute arbitrary code in the context of t...

Apple QuickTime 7.1.3 RTSP URI Buffer Overflow

No description provided by source. $Id: applequicktimertsp.rb 9220 2010-05-04 23:09:32Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

QuickTime Picture Viewer 7.6.6 JP2000 Denial of Service Vulnerability

No description provided by source. done by BraniX [email protected] www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: QuickTime PictureViewer 7.6.6 DoS, Access Violation Exception PictureViewer.exe MD5: B2859391D32DBBFCE00FD2F641863954...

Apple Quicktime /w IE .qtl Version XAS - Remote Exploit PoC

No description provided by source. !-- Performing XAS Cross Application Scripting attacks automatically read no user interaction is very easy, as I showed before in my shutting down skype proof-of-concept. But, what if you are using a limited web environment, where you can't use iframes or script...

Apple QuickTime PICT PnSize Buffer Overflow

No description provided by source. $Id: applequicktimepnsize.rb 13691 2011-09-03 21:17:58Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

Apple QTJava toQTPointer() Arbitrary Memory Access

No description provided by source. $Id: qtjavapointer.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Apple Mac OS X 10.x .zip Parsing BOMStackPop() Function Overflow

No description provided by source. source: http://www.securityfocus.com/bid/17634/info Apple Mac OS X is reported prone to multiple security vulnerabilities. These issue affect Mac OS X and various applications including Safari, Preview, Finder, QuickTime, and BOMArchiveHelper. A remote attacker...

Apple Mac OS X 10.x - LZWDecodeVector (.tiff) Overflow

No description provided by source. source: http://www.securityfocus.com/bid/17634/info Apple Mac OS X is reported prone to multiple security vulnerabilities. These issue affect Mac OS X and various applications including Safari, Preview, Finder, QuickTime, and BOMArchiveHelper. A remote attacker...

Apple QuickTime/Darwin Streaming Server 4.1.3 QTSSReflector Module Integer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7659/info A vulnerability has been reported for Apple QuickTime/Darwin Streaming Server. The problem is said to occur within the QTSSReflector module while processing the ANNOUNCE command. Specifically, by specifying an...

Apple Quicktime < 7.2 - SMIL Remote Integer Overflow PoC

No description provided by source. ---------------------------------------------------------------------- ATTACK VECTORS ---------------------------------------------------------------------- This vulnerability can be triggered by luring a target user into running a malicious SMIL file locally or...

Apple QuickTime <= 6.5.2.10 (.qtif) Image Parsing Vulnerability

No description provided by source. Added qtif on milw0rm's sploits archive/ /str0ke Application: QuickTime http://www.apple.com/quicktime/ AFFECTED VERSION: Versions verified to be vulnerable: QuickTime.qts 6.5.2.10 and prior versions are affected. The bug: The problem specifically exists when...

Apple Safari & Quicktime Denial of Service Vulnerability

No description provided by source. Apple Safari & Quicktime Denial of Service Shameless plug : ------------------------------------------------------------------------ You are invited to join the 2009 edition of HACK.LU, a small but concentrated luxemburgish security conference. More information ...

Apple Quicktime for Java 7 - Memory Access

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Apple QuickTime 6.4/6.5/7.0.x PictureViewer JPEG/PICT File Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16212/info Apple QuickTime is prone to a buffer-overflow vulnerability because the application fails to do proper bounds checking on user-supplied data before copying it to finite-sized process buffers. An attacker may be...

QuickTime Streaming Server parse_xml.cgi Remote Execution

No description provided by source. $Id: qtssparsexmlexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...