CVE-2011-0248

CVE-2011-0248 : Stack-based buffer overflow in the QuickTime ActiveX control of Apple QuickTime on Windows (pre-7.7) when using Internet Explorer, exploitable via a crafted QTL file to execute arbitrary code or cause a crash. The connected Red Hat (RH:CVE-2011-0248) and ZDI advisories describe th...

CVE-2011-0249

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted STSC atoms in a QuickTime movie file...

CVE-2011-0245

Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted pict file...

CVE-2011-0251

CVE-2011-0251 is an Apple QuickTime STSZ atom parsing vulnerability that causes a heap-based buffer overflow, enabling remote code execution or a crash when processing crafted QuickTime Movie files. The flaw exists in QuickTime prior to 7.7 and stems from handling of STSZ atoms, per ZDI advisorie...

QuickTime < 7.7 Multiple Vulnerabilities

Binary data 6000.prm...

QuickTime < 7.7 Multiple Vulnerabilities

Binary data 801184.prm...

QuickTime < 7.7 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.7. As such, it reportedly may be affected by the following vulnerabilities : - A buffer overflow in QuickTime's handling of pict files may lead to an application crash or arbitrary code execution. CVE-2011-0245 - A...

Apple Releases QuickTime 7.7

Apple has released QuickTime 7.7 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review Apple Support Article HT4826 and apply any necessary updates to...

QuickTime < 7.7 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.7. As such, it reportedly may be affected by the following vulnerabilities : - A buffer overflow in QuickTime's handling of pict files may lead to an application crash or arbitrary code execution. CVE-2011-0245 - A buff...

CVE-2011-0246: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted GIF file...

CVE-2011-0248: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted QTL file...

CVE-2011-0249: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted STSC atoms in a QuickTime movie file...

CVE-2011-0252: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted STTS atoms in a QuickTime movie file...

CVE-2011-0245: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted pict file...

CVE-2011-0251: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted STSZ atoms in a QuickTime movie file...

CVE-2011-0250: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted STSS atoms in a QuickTime movie file...

CVE-2011-0247: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Apple QuickTime before 7.7 on Windows allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted H.264 movie...

PT-2011-2225

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7 Description The issue is related to a heap-based buffer overflow that can be triggered by crafted STSZ atoms in a QuickTime movie file, allowing remote attackers to execute arbitrary code or cause a denial...

PT-2011-2226

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7 Description The issue is related to a heap-based buffer overflow that can be triggered by crafted STTS atoms in a QuickTime movie file, allowing remote attackers to execute arbitrary code or cause a denial...

PT-2011-2220

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7 Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted GIF file. Recommendations For Apple QuickTime versions prior to...