CVE-2010-0516

CVE-2010-0516 is a heap-based buffer overflow in Apple QuickTime for Mac OS X prior to 10.6.3. A crafted .mov file using the RLE encoding can cause memory corruption when the decompressed data length exceeds the heap chunk, enabling remote code execution or a denial of service (application crash)...

CVE-2010-0515

QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file with H.264 encoding...

CVE-2010-0062

Apple QuickTime on macOS X contains a heap-based buffer overflow in quicktime.qts while parsing H.263 data from malformed .3g2 files, allowing remote code execution or a crash. Affected: QuickTime/OS X prior to 10.6.3 (Apple Mac OS X 10.6.3 Update/Security Update 2010-002). Exploitation requires ...

CVE-2010-0526

Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted genl atom in a QuickTime movie file with MPEG encoding, which is not properly handled during...

CVE-2010-0519

Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a FlashPix image with a malformed SubImage Header Stream containing a NumberOfTiles field with a large value...

CVE-2010-0518

CVE-2010-0518 refers to QuickTime on Apple Mac OS X prior to 10.6.3. The vulnerability is a memory corruption issue in the handling of Sorenson-encoded movie files, which can allow a remote attacker to execute arbitrary code or cause a denial of service via a crafted file. The OpenVAS/NASL/Nessus...

CVE-2010-0520

CVE-2010-0520 represents a heap-based buffer overflow in Apple QuickTime, specifically in QuickTimeAuthoring.qtx during parsing of DELTA_FLI chunks in a malformed .fli file. The flaw arises from untrusted/incorrect length values during decompression, allowing remote attackers to execute arbitrary...

CVE-2010-0526

CVE-2010-0526 is a vulnerability in Apple QuickTime (Mac OS X) where parsing a malformed MPEG-like genl atom in QuickTimeMPEG.qtx can cause a heap overflow and, under certain conditions, remote code execution. Public write-ups (ZDI advisories ZDI-10-035 and ZDI-10-045) describe a heap/bounds-chec...

CVE-2010-0520

Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FLC file, related to crafted DELTAFLI chunks and untrusted length values in a .fli file,...

CVE-2010-0526: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted genl atom in a QuickTime movie file with MPEG encoding, which is not properly handled during...

CVE-2010-0515: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file with H.264 encoding...

CVE-2010-0519: Undefined Security Weakness

Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a FlashPix image with a malformed SubImage Header Stream containing a NumberOfTiles field with a large value...

CVE-2010-0516: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with RLE encoding, which triggers memory corruption when the length of decompressed data exceeds that o...

CVE-2010-0517: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields,...

CVE-2010-0520: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FLC file, related to crafted DELTAFLI chunks and untrusted length values in a .fli file,...

CVE-2010-0062: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed .3g2 movie file with H.263 encoding that triggers an incorrect buffer length...

CVE-2010-0518: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file with Sorenson encoding...

CVE-2010-0514: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.261 encoding...

Mac OS X < 10.6.3 Multiple Vulnerabilities

Binary data 5489.prm...

Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.3. Mac OS X 10.6.3 contains security fixes for the following products : - AFP Server - Apache - CoreAudio - CoreMedia - CoreTypes - CUPS - DesktopServices - Disk Images - Directory Services - Dovecot - Event Monitor -...