CVE-2014-1243

Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted track list in a movie file...

CVE-2014-1248

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ldat atom in a movie file...

CVE-2014-1249

CVE-2014-1249 affects Apple QuickTime before 7.7.5. The vulnerability is a buffer overflow in the PSD image handling used by QuickTime, which can lead to remote arbitrary code execution or an application crash. Connected sources corroborate a PSD-related overflow in QuickTime, with multiple OpenV...

CVE-2014-1249

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PSD image...

CVE-2014-1245

Apple QuickTime before 7.7.5 contains a vulnerability in the processing of the stsz atom within movie files. This can allow remote code execution or a crash when a crafted stsz value is processed in a QuickTime viewing context. Exploitation requirements include user interaction (per ZDI advisory)...

CVE-2014-1251

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted clef atom in a movie file...

CVE-2014-1247

CVE-2014-1247 affects Apple QuickTime prior to 7.7.5. A flaw in handling of dref atoms (as described in ZDI-14-046) can allow remote code execution or memory corruption when a user opens a crafted movie file or visits a malicious page; user interaction is required. Impact is execution of arbitrar...

CVE-2014-1248

CVE-2014-1248 affects Apple QuickTime prior to 7.7.5. A buffer overflow in the handling of the ldat atom in movie files can allow remote code execution or cause an application crash (DoS). Mitigation: apply QuickTime 7.7.5 or later updates where this issue was addressed. Exploitation details are ...

CVE-2014-1250

Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted ttfo element in a movie file...

Apple Releases QuickTime 7.7.5

Apple has released QuickTime 7.7.5 for Windows operating systems to address multiple vulnerabilities, which may lead to an unexpected application termination or arbitrary code execution. US-CERT encourages users and administrators to review Apple Support Article HT6151 and apply any necessary...

CVE-2014-1246: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ftab atom in a movie file...

CVE-2014-1245: Undefined Security Weakness

Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted stsz atom in a movie file...

CVE-2014-1247: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted dref atom in a movie file...

CVE-2014-1251: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted clef atom in a movie file...

CVE-2014-1243: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted track list in a movie file...

CVE-2014-1248: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ldat atom in a movie file...

CVE-2014-1250: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted ttfo element in a movie file...

CVE-2014-1249: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PSD image...

CVE-2014-1244: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

PT-2014-4036

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to out-of-bounds memory access and application crash via a crafted ttfo element in a movie file...