CVE-2010-1508: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted Track Header aka tkhd atoms...

CVE-2010-3800: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PICT file...

CVE-2010-3801: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted FlashPix file...

CVE-2010-0530: Undefined Security Weakness

Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive information by reading files in this directory...

CVE-2010-4009: Undefined Security Weakness

Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

PT-2010-5235

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue is related to an integer overflow that can be triggered by a crafted movie file, allowing remote attackers to execute arbitrary code or cause the application to crash. Recommendatio...

Apple Releases QuickTime 7.6.9

Apple has released QuickTime 7.6.9 to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or obtain sensitive information. US-CERT encourages users and administrators to review Apple article...

Apple QuickTime JPEG2000 heap buffer overflow

Overview Apple QuickTime contains a heap buffer overflow in the processing of JPEG2000 data, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple's QuickTime Player is multimedia software that allows users to view local and remote...

QuickTime < 7.6.9 Multiple Vulnerabilities

Binary data 801191.prm...

QuickTime < 7.6.9 Multiple Vulnerabilities

Binary data 5725.prm...

QuickTime < 7.6.9 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.9. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of JP2 images may lead to an application crash or arbitrary code execution. CVE-2010-3787 - Uninitialized memory...

QuickTime < 7.6.9 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.6.9. Such versions contain several vulnerabilities : - A filesystem permission issue may allow a local user on a Windows system to access the contents of the 'Apple Computer' directory in the user's profile. CVE-2010-05...

PT-2010-5088

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue is related to an integer signedness error that can be triggered by a crafted panorama atom in a QuickTime Virtual Reality QTVR movie file. This can lead to memory corruption and...

PT-2010-3183

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue is related to a heap-based buffer overflow that can be triggered by crafted Track Header aka tkhd atoms, allowing remote attackers to execute arbitrary code or cause a denial of...

PT-2010-5087

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted FlashPix file. Recommendations Fo...

PT-2010-5086

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted PICT file. This is related to the...

Apple QuickTime PICT directBitsRect Pack3 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Apple QuickTime Panorama Atom Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that a user must be coerced into visiting a malicious page or opening a malicious file. The specific flaw exists withi...

Apple QuickTime PICT File PackBits Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the application'...

Apple QuickTime FPX Subimage Count Out-of-bounds Counter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required in that a user must be coerced into opening up a malicious document or visiting a malicious website. The specific flaw exists within the way the...