CVE-2016-4596

The connected Apple security content confirms CVE-2016-4596 affects QuickTime in OS X El Capitan v10.11 and later, via a crafted FlashPix bitmap image, leading to memory corruption that could allow remote code execution or a denial of service. The underlying software component implicated is Quick...

Apple QuickTime FPX File Parsing Memory Corruption (CVE-2016-1767)

A memory corruption vulnerability exists in Apple QuickTime. The vulnerability is due to improper parsing of FlashPix files. A remote attacker may exploit this vulnerability by enticing a victim into opening a crafted FlashPix file...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the QuickTime component in the Mac OS X operating system is caused by buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely or cause a service failure memory corruption using a specially crafted FlashPix image...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the QuickTime component in the Mac OS X operating system is caused by buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely or cause a service failure memory corruption using a specially crafted FlashPix image...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2016-01897)

Apple OS X is a specialized operating system developed by Apple for Mac computers.QuickTime is a multimedia playback software used in it. A memory corruption vulnerability exists in QuickTime in Apple OS X versions prior to 10.11.4. An attacker can exploit this vulnerability to cause a denial of...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2016-01898)

Apple OS X is a specialized operating system developed by Apple for Mac computers.QuickTime is a multimedia playback software used in it. A memory corruption vulnerability exists in QuickTime in Apple OS X versions prior to 10.11.4. An attacker can exploit this vulnerability to cause a denial of...

CVE-2016-1768

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix image, a different vulnerability than CVE-2016-1767...

CVE-2016-1768

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix image, a different vulnerability than CVE-2016-1767...

CVE-2016-1767

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix image, a different vulnerability than CVE-2016-1768...

CVE-2016-1767

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix image, a different vulnerability than CVE-2016-1768...

Memory corruption

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix image, a different vulnerability than CVE-2016-1767...

Memory corruption

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix image, a different vulnerability than CVE-2016-1768...

CVE-2016-1768

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix image, a different vulnerability than CVE-2016-1767...

CVE-2016-1767

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix image, a different vulnerability than CVE-2016-1768...

IrfanView FlashPix PlugIn Decompression Heap Overflow

No description provided by source. Application: IrfanView FlashPix PlugIn Decompression Heap Overflow Platforms: Windows Secunia Number: SA48772 PRL: 2012-08 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2...

XnView FlashPix Image Processing Heap Overflow

No description provided by source. Application: XnView FlashPix Image Processing Heap Overflow Platforms: Windows Secunia: SA47388 PRL: 2012-06 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...

IrfanView FlashPix PlugIn Double-Free Vulnerability

No description provided by source. Application: IrfanView FlashPix PlugIn Double-Free Vulnerability Platforms: Windows Exploitation: Remote code execution Secunia Number: SA47322 PRL: 2011-11 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter:...

Apple QuickTime FlashPix NumberOfTiles - Remote Code Execution Vulnerability

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 2 Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/apple-quicktime-flashpix-numberoftiles-vulnerability/ ''' ''' Title : Apple QuickTime...

Apple QuickTime FlashPix Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

IrfanView FlashPix Plugin < 4.36 Summary Information Property Set Handling Integer Overflow

The version of the IrfanView FlashPix plugin Fpx.dll was found to be earlier than 4.36. As such, it is affected by an integer overflow error within the 'Fpx.dll' module. The 'Summary Information Property Set' is not properly validated, which could result in a heap-based buffer overflow, allowing ...