Apple QuickTime and iTunes Movie File Heap Memory Corruption (CVE-2005-4092)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The QuickTime product is also installed as a component with the Apple iTunes product. The software supports parsing and displaying picture files as well as numerous video formats. QuickTime is capable of processin...

[EEYEB-20051117A] Apple QuickTime STSD Atom Heap Overflow

EEYEB-20051117A Apple QuickTime STSD Atom Heap Overflow Release Date: January 10, 2006 Date Reported: November 17, 2005 Patch Development Time In Days: 54 Days Severity: High Code Execution Vendor: Apple Systems Affected: Quicktime on Windows 2000 Quicktime on Windows XP Quicktime on Mac OS X...

CVE-2005-4128

CVE-2005-4128 is a duplicate of CVE-2005-4092. The connected advisories describe Apple QuickTime/QuickTime Player heap memory corruption vulnerabilities in handling various image/media formats (GIF, TGA, TIFF, STSD) that may allow remote code execution or denial of service. The issues were addres...

CVE-2005-4092

Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 3 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via a .mov file with 1 a Movie Resource atom with a large size value, or 2 an stsd atom with a...

CVE-2005-4092

Summary of CVE-2005-4092 and related advisories: This issue is a heap-based overflow in Apple QuickTime/ iTunes involving QuickTime.qts, exploitable via crafted QuickTime movie files. The vulnerabilities concern the handling of the Movie Resource atom with a large size and the STSD (Sample Descri...