1636 matches found
CVE-2004-0926
CVE-2004-0926 : A heap-based buffer overflow in Apple QuickTime’s BMP image decoding on Mac OS X 10.2.8–10.3.5 may allow remote code execution. The vulnerability is tied to QuickTime’s BMP handling; no remediation/patch information is provided in the supplied documents, and exploitation status is...
CVE-2004-0988
Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service memory consumption via certain inputs that cause a large memory operation...
CVE-2004-0988: Undefined Security Weakness
Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service memory consumption via certain inputs that cause a large memory operation...
CVE-2004-0926: Undefined Security Weakness
Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image...
AppleQuickTime code execution
No description provided...
Apple QuickTime Streaming Server vulnerable to DoS
Overview There is a vulnerability in the Apple QuickTime Streaming Server that could allow a remote attacker to cause a denial-of-service condition. Description Apple's QuickTime Streaming Server provides an integrated distribution mechanism for various forms of digital content. There is a...
CVE-2002-0376
Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field...
CVE-2002-0376
Technical details about CVE-2002-0376 are not publicly provided in the supplied documents. Monitor for updates for affected products, vulnerable components and fixes; no concrete exploit vectors or mitigations are described here.
CVE-2002-0376: Undefined Security Weakness
Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field...
CVE-2004-0431
Integer overflow in Apple QuickTime QuickTime.qts before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow...
CVE-2004-0431
CVE-2004-0431 concerns Apple QuickTime (QuickTime.qts) before 6.5.1. The vulnerability is an integer overflow in the Sample-to-Chunk table handling that can overflow a heap and enable arbitrary code execution when a user opens a malicious QuickTime file. Affected component is QuickTime.qts in Qui...
CVE-2004-0431
Integer overflow in Apple QuickTime QuickTime.qts before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow...
CVE-2004-0431: Undefined Security Weakness
Integer overflow in Apple QuickTime QuickTime.qts before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow...
Apple QuickTime contains an integer overflow in the "QuickTime.qts" extension
Overview Apple QuickTime contains an integer overflow vulnerability in the "QuickTime.qts" extension, which could result in arbitrary code execution. Description Apple's QuickTime Player is a player that allow users to view local and remote audio/video content. Other applications, such as web...
Apple QuickTime buffer overflow
Buffer overflow on parsing QuickTime format...
[Full-Disclosure] EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow
Apple QuickTime QuickTime.qts Heap Overflow Release Date: May 02, 2004 Date Reported: February 18, 2004 Severity: High Code Execution Vendor: Apple Systems Affected: Apple QuickTime 6.5 Apple iTunes 4.2.0.72 Description: The Apple QuickTime media player is used for playing, interacting with or...
Apple Quicktime/Darwin Streaming Server fails to properly parse DESCRIBE requests
Overview Apple Quicktime/Darwin Streaming Server fails to properly parse DESCRIBE requests containing overly large User-Agent fields. This could allow an unauthenticated, remote attacker to cause a denial-of-service condition. Description Apple's QuickTime and Darwin Streaming Server is software...
CVE-2003-1414
Directory traversal vulnerability in parsexml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... triple dot in the filename parameter...
CVE-2003-0502
Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service crash via a .. dot dot sequence followed by an MS-DOS device name e.g. AUX in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421...