SuSE 10 Security Update : Xine (ZYPP Patch Number 6229)

This update of xine-lib fixes an integer overflow in the qterror parsetrakatom function in that leads to a heap-based overflow and allows remote attackers to execute arbitrary code via a malformed Quicktime movie file. CVE-2009-1274 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

Apple QuickTime 7.6.6 - Invalid SMIL URI Buffer Overflow (Metasploit)

$Id: applequicktimesmildebug.rb 11513 2011-01-08 00:25:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Apple QuickTime 7.6.7 - _Marshaled_pUnk Code Execution (Metasploit)

$Id: applequicktimemarshaledpunk.rb 11513 2011-01-08 00:25:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

QuickTime Picture Viewer 7.6.6 JP2000 Denial of Service Vulnerability

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: QuickTime PictureViewer 7.6.6 DoS, Access Violation Exception PictureViewer.exe MD5: B2859391D32DBBFCE00FD2F641863954 filepath =...

QuickTime Picture Viewer 7.6.6 JP2000 - Denial of Service

QuickTime Picture Viewer 7.6.6 JP2000 - Denial of Service done by BraniX www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: QuickTime PictureViewer 7.6.6 DoS, Access Violation Exception PictureViewer.exe MD5: B2859391D32DBBFCE00FD2F641863954...

Apple QuickTime Multiple Vulnerabilities (Dec 2010) - Windows

QuickTime Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

QuickTime Picture Viewer 7.6.6 JP2000 - Denial of Service

done by BraniX www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: QuickTime PictureViewer 7.6.6 DoS, Access Violation Exception PictureViewer.exe MD5: B2859391D32DBBFCE00FD2F641863954 filepath = "C:\QuickTime PictureViewer 7.6.6 JP2000 DoS.jp2" ...

QuickTime Picture Viewer 7.6.6 Denial Of Service

done by BraniX www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: QuickTime PictureViewer 7.6.6 DoS, Access Violation Exception PictureViewer.exe MD5: B2859391D32DBBFCE00FD2F641863954 filepath = "C:\QuickTime PictureViewer 7.6.6 JP2000 DoS.jp2" ...

Apple QuickTime FPX Subimage Remote Code Execution (CVE-2010-3801)

Apple QuickTime is a media player application that is capable of playing back numerous multimedia file formats from local file system or network servers. A memory corruption vulnerability has been reported in Apple QuickTime. A remote attacker could exploit this issue via a malformed FPX file...

Apple Quicktime Memory Corruption - CVE-2010-3801

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Apple Quicktime Memory Corruption when parsing FPX files CVE-2010-3801...

Secunia Research: QuickTime Track Dimensions Buffer Overflow Vulnerability

====================================================================== Secunia Research 08/12/2010 - QuickTime Track Dimensions Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

iDefense Security Advisory 12.07.10: Apple QuickTime PICT Memory Corruption Vulnerability

iDefense Security Advisory 12.07.10 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 07, 2010 I. BACKGROUND QuickTime is Apple's media player product used to render video and other media. The PICT file format was developed by Apple Inc. in 1984. PICT files can contain both object-orient...

About the security content of QuickTime 7.6.9

About the security content of QuickTime 7.6.9 Last Modified: December 07, 2010 Article: HT4447 Email this article Print this page Summary This document describes the security content of QuickTime 7.6.9. For the protection of our customers, Apple does not disclose, discuss, or confirm security...

CVE-2010-3800

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PICT file...

CVE-2010-3802

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted panorama atom in a QuickTime Virtual Reality QTVR movie file...

CVE-2010-3801

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted FlashPix file...

CVE-2010-4009

Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

CVE-2010-1508

Heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted Track Header aka tkhd atoms...

CVE-2010-0530

Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive information by reading files in this directory...

Integer overflow

Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...