CVE-2010-3787: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JP2 image...

CVE-2010-3793: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Sorenson movie file...

CVE-2010-3795: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of GIF image data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted GIF file...

CVE-2010-3794: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of FlashPix image data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FlashPix file...

CVE-2010-3792: Undefined Security Weakness

Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG movie file...

CVE-2010-3790: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file that causes an image sample transformation to scale a sprite outside a buffer boundary...

CVE-2010-3791: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG movie file...

CVE-2010-3788: Improper Input Validation

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of JP2 image data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JP2 file...

CVE-2010-3789: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted AVI file...

Amnesty International Site Found Hosting Malware, IE Zero Day

Researchers at security firm Websense have found that Amnesty International’s Hong Kong site, amnesty.org.hk, is serving up a cocktail of malware that includes last week’s Internet Explorer 0-day. Visitors to the human rights organization’s site operating versions 6 and 7 of IE are being targeted...

Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities

Binary data 5705.prm...

Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities

Versions of Mac OS X 10.6 earlier than 10.6.5 are potentially affected by multiple vulnerabilities. Mac OS X 10.6.5 contains security fixes for the following products : - AFP Server - Apache modperl - Apache - AppKit - ATS - CFNetwork - CoreGraphics - CoreText - CUPS - Directory Services -...

PT-2010-5078

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MPEG movie file. This is due to a buffer overflow in QuickTime. Recommendations Fo...

PT-2010-5082

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 QuickTime in Apple Mac OS X version 10.6.x before 10.6.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted GIF file, due to QuickTim...

PT-2010-5081

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 QuickTime version not specified, but affected in Mac OS X 10.6.x before 10.6.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted...

Apple QuickTime m1s Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the quicktime.qtx. When...

Apple QuickTime FlashPix Max Uninitialized Jpeg Table Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple's QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Apple QuickTime ELST MediaRate Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the QuickTimeMPEG.qtx...

Apple QuickTime GIF LZW Decompression Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required in that a target must open a malicious media file or visit a malicious page. The specific flaw exists within the application's implementation of the LZ...

Apple QuickTime JP2 SIZ Chunk Uninitialized Object Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the application'...