Code injection

ir5032.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

CVE-2008-3615

CVE-2008-3615 affects Apple QuickTime on Windows due to an uninitialized memory access in the third‑party Indeo v5 codec (ir50_32.qtx). A crafted movie file can trigger remote code execution or cause a denial of service (crash). The issue is mitigated by updating to QuickTime 7.5.5 or later (as r...

CVE-2008-3635

Apple QuickTime CVE-2008-3635 is a stack-based buffer overflow in QuickTimeInternetExtras.qtx when parsing Indeo v3.2 (IV32) in QuickTime on Windows prior to 7.5.5. The flaw arises from missing bounds checking in the IV32 codec parsing, allowing remote code execution or a crash via a crafted movi...

CVE-2008-3635

Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 aka IV32 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted...

CVE-2008-3615: Undefined Security Weakness

ir5032.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

Apple QuickTime IV32 Codec Parsing Stack Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of QuickTim...

Update Protection against Microsoft MJPEG Decoder Vulnerability (MS08-033)

A remote code execution vulnerability has been reported in the way that the Windows MJPEG Codec handles MJPEG streams in media files. MJPEG is a media file that contains a number of JPEG images that have been connected together to create a video stream. A remote attacker may exploit this...

Microsoft DirectX SAMI文件及MJPEG视频流解析栈溢出漏洞（MS08-032）

BUGTRAQ ID: 29581,29578 CVECAN ID: CVE-2008-0011,CVE-2008-1444 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX在解析SAMI文件中的Class Name变量属性参数时存在栈溢出漏洞，Windows MJPEG Codec在解析ASF或AVI媒体文件中内嵌的MJPEG音频流时存在另一个栈溢出漏洞。如果用户受骗打开或预览了恶意的媒体文件的话，就可以触发这些溢出，导致执行任意指令。 Microsoft DirectX 9.0...

Debian Security Advisory DSA 1591-1 (libvorbis)

The remote host is missing an update to libvorbis announced via advisory DSA 1591-1. OpenVAS Vulnerability Test $Id: deb15911.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1591-1 libvorbis Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Apple QuickTime Player 7.5修复多个安全漏洞

BUGTRAQ ID: 29619 CVECAN ID: CVE-2008-1581,CVE-2008-1582,CVE-2008-1583,CVE-2008-1584,CVE-2008-1585 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime的7.5之前版本存在多个安全漏洞，允许用户通过畸形的媒体文件获得敏感信息或完全入侵用户系统。 CVE-2008-1581 QuickTime在处理PICT图形中的PixData结构时存在堆溢出漏洞，如果用户受骗打开了恶意的PICT图形的话就会导致播放器终止或执行任意指令。 CVE-2008-1582...

Stack overflow

Stack-based buffer overflow in Indeo.qtx in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service crash or execute arbitrary code via crafted Indeo video codec content in a movie file...

CVE-2008-1584

Stack-based buffer overflow in Indeo.qtx in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service crash or execute arbitrary code via crafted Indeo video codec content in a movie file...

CVE-2008-1584

Stack-based buffer overflow in Indeo.qtx in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service crash or execute arbitrary code via crafted Indeo video codec content in a movie file...

QuickTime < 7.5 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.5. Such versions contain several vulnerabilities : - There is a heap-based buffer overflow in QuickTime's handling of PICT image files that could result in a program crash or arbitrary code execution CVE-2008-1583. -...

Apple QuickTime Indeo Video Buffer Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple Quicktime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

QuickTime < 7.5 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.5. Such versions contain several vulnerabilities : - There are two heap-based buffer overflows in QuickTime's handling of PICT image files that could result in a program crash or arbitrary code execution CVE-2008-1581 a...

DSA-1591-1 libvorbis - several vulnerabilities

Bulletin has no description...

CVE-2008-1577

Unspecified vulnerability in the Pixlet codec in Apple Pixlet Video in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file, related to "multiple memory corruption issues."...

Memory corruption

Unspecified vulnerability in the Pixlet codec in Apple Pixlet Video in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file, related to "multiple memory corruption issues."...

CVE-2008-1577

Unspecified vulnerability in the Pixlet codec in Apple Pixlet Video in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file, related to "multiple memory corruption issues."...