PT-2016-5349

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.7 FFmpeg versions prior to 0.11 Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via the entries value in a dref box in an MP4 file. This is due to a problem in the...

Apple Quicktime dref Atom Null Data Reference Entry Denial of Service Vulnerability

Talos Vulnerability Report TALOS-2016-0023 Apple Quicktime dref Atom Null Data Reference Entry Denial of Service Vulnerability January 8, 2016 CVE Number CVE-2015-7090 Description There is a denial of service vulnerability in Apple Quicktime. An attacker who can control the size and type of a dat...

Apple QuickTime dref Atom Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Memory corruption

Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted dref atom in a movie file...

CVE-2014-1247: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted dref atom in a movie file...

PT-2014-4033

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted dref atom in a movie file...

Apple QuickTime dref Volume Name Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of a...

CVE-2013-1017

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted dref atoms in a movie file...

Buffer overflow

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted dref atoms in a movie file...

PT-2013-2809

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via crafted dref atoms in a movie file. This is related to buffer overflow in the parsing of dref volu...

CVE-2013-1017: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted dref atoms in a movie file...