3 matches found
CVE-2011-0257: Undefined Security Weakness
Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow...
PT-2011-2231
Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7 Description The issue is related to an integer signedness error that can be triggered by a crafted PnSize opcode in a PICT file, leading to a stack-based buffer overflow. This can result in the execution o...
Apple QuickTime PICT Image PnSize Opcode Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...