3371 matches found
Apple QuickTime 7.1.3 Plug-In Arbitrary Script Execution Weakness
No description provided by source. source: http://www.securityfocus.com/bid/20138/info Apple QuickTime plug-in is prone to an arbitrary-script-execution weakness when executing QuickTime Media Link files .qtl. An attacker can exploit this issue to execute arbitrary script code in the context of t...
Apple QuickTime "_Marshaled_pUnk" Backdoor Param Client-Side Arbitrary Code Execution
No description provided by source. Original Source: http://reversemode.com/index.php?option=comcontent&task=view&id=69&Itemid=1 Victim prerequisites: Internet Explorer. XP,Vista,W7. Apple Quicktime 7.x, 6.x 2004 versions are also vulnerable, older versions not checked 1. Victim is enticed into...
Apple Quicktime <= 7.1.3 (HREFTrack) Cross-Zone Scripting Exploit
No description provided by source. !/usr/bin/ruby c 2006 LMH lmh at info-pull.com Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the fake FTP server required. HTTP server port can...
Apple QuickTime 7.6.6 Invalid SMIL URI Buffer Overflow
No description provided by source. $Id: applequicktimesmildebug.rb 11513 2011-01-08 00:25:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Apple QuickTime Player 7.7.2 Crash PoC
No description provided by source. !/usr/bin/perl Title : Apple QuickTime Player 7.7.2 Division By Zero Version : 7.7.21680.56 Date : 2012-10-23 Vendor : http://www.apple.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- Don't forget...
QuickTime 7.5.5 / ITunes 8.0 - Remote off by one Crash Exploit
No description provided by source. Quicktime7.5.5/Itunes 8.0 Remote Heap Overflow Crash Vendor: http://www.apple.com/ Risk : high The ? quicktime type= ? tag fail to handle long strings, which can lead to a heap overflow in Quicktime/Itunes media player. This bug can be remote or local,...
Apple QuickTime FLI LinePacket - Remote Code Execution Vulnerability
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-18-apple-quicktime-fli-linepacket-remote-code-execution-vulnerability/ ''' ''' Title : Apple QuickTime FLI...
Apple QuickTime 7.7.2 Targa image Buffer Overflow
No description provided by source. Application : Apple QuickTime Versions : = before 7.7.3 CVE : 2012-3755 Impact : 9.3 High References : http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html Auther : Senator of Pirates E-Mail : SenatorofPirates.teamatgmail.com FaceBook :...
Apple QuickTime/Darwin Streaming Server 4.1.x parse_xml.cgi File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6990/info A file retrieval vulnerability has been reported for QuickTime/Darwin Streaming Server. The vulnerability exists due to insufficient sanitization of some parameters given to the parsexml.cgi script. Information...
Apple Quicktime 7 Invalid Atom Length Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Apple QuickTime 7.7.2 TeXML Style Element font-table Field Stack Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Apple QuickTime 7.6.7 _Marshaled_pUnk Code Execution
No description provided by source. $Id: applequicktimemarshaledpunk.rb 11513 2011-01-08 00:25:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
Apple QuickTime FlashPix NumberOfTiles - Remote Code Execution Vulnerability
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 2 Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/apple-quicktime-flashpix-numberoftiles-vulnerability/ ''' ''' Title : Apple QuickTime...
Apple QuickTime 7.2/7.3 - RSTP Response Universal Exploit (win/osx)
No description provided by source. Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code http://www.milw0rm.com/exploits/4651 recent Microsoft Windows...
MacOS X QuickTime RTSP Content-Type Overflow
No description provided by source. $Id: quicktimertspcontenttype.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Apple iTunes 10 Extended M3U Stack Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Joomla Component QuickTime VR 0.1 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Joomla Component QuickTime VR v 0.1 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : Mr.Al3FrItE & Islamic Security Team & Mounita20 & CoNaN and all musulmans hackers ComponentName: QuickTime VR...
Apple QuickTime Image Description Atom Sign Extension PoC
No description provided by source. print -----------BID 35166---------- print w3bd3vil at gmail dot com print Apple QuickTime Image Description Atom Sign Extension Vulnerability PoC print -----------BID 35166---------- bytes = 0x00, 0x00, 0x00, 0x08, 0x77, 0x69, 0x64, 0x65, 0x00, 0x02, 0xD6, 0x48...
Apple QuickTime <= 7.4.1 NULL Pointer Dereference Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35359/info Apple QuickTime is prone to a denial-of-service vulnerability. Note that an attacker will exploit this issue through the Safari browser by enticing a user to visit a malicious site. This will crash the user's...
Multiple Media Player HTTP DataHandler Overflow (Itunes, Quicktime, etc)
No description provided by source. ScaryMovie Exploit Study By: DrIDE October, 2009 There is a widespread failure in the way that .MOV files are handled by the Quicktime Library. I have attempted to compound my findings on this issue. Nearly every .MOV enabled application that I tested fell victi...