Apple QuickTime 7.7.1之前版本TKHD 元素处理远程代码执行漏洞

BUGTRAQ ID: 50403 CVE ID: CVE-2011-3251 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 Apple QuickTime 7.7.1之前版本在处理特制视频文件时存在远程代码执行漏洞，攻击者可利用此漏洞以当前用户权限执行任意代码，导致应用意外终止。此漏洞不影响Mac OS X系统。 Apple QuickTime Player 7.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[SECURITY] Fedora 14 Update: blender-2.49b-14.fc14

Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...

[SECURITY] Fedora 15 Update: blender-2.49b-16.fc15

Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...

CVE-2011-2620

Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors involving SVG animation...

Design/Logic Flaw

Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors involving SVG animation...

CVE-2011-2620

Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors involving SVG animation...

CVE-2011-2620

CVE-2011-2620 concerns Opera before version 11.50, where an unspecified vulnerability in SVG animation could be exploited by remote attackers to cause the application to crash (DoS). The connected documents consistently describe Opera’s SVG animation vectors as the weakness, with multiple entries...

CVE-2011-2620: Undefined Security Weakness

Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors involving SVG animation...

PT-2011-3969

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.50 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved through vectors involving SVG animation. Recommendations For versions prior to 11.50,...

CVE-2011-1116

Google Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

Null pointer dereference

Google Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

CVE-2011-1116

Google Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

CVE-2011-0981

Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

CVE-2011-0981

Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

Google Chrome < 9.0.597.94 Multiple Vulnerabilities

Binary data 5780.pasl...

CVE-2011-0502

Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service crash and possibly have other unspecified impact via a long line in a MIDI .mid file...

CVE-2011-0501

Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long line in a .mamx file...

Stack overflow

Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long line in a .mamx file...

CVE-2011-0501

Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long line in a .mamx file...

CVE-2011-0501

The CVE-2011-0501 entry describes a stack-based buffer overflow in Music Animation Machine MIDI Player (noted as 2006aug19 Release 035 and possibly other versions). The underlying issue is a long line in a .mamx file that allows user‑assisted remote attackers to execute arbitrary code. Multiple c...