3526 matches found
CVE-2006-1464
Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime MPEG4 M4P video format file...
CVE-2006-1460
Apple QuickTime before 7.1 is affected by CVE-2006-1460 due to a heap buffer overflow in the udta Atom of MOV files. A crafted MOV containing an oversized udta Atom can trigger memory overwrite, leading to remote code execution under the user’s context. Affected products include QuickTime for Win...
CVE-2006-1461
Apple QuickTime before 7.1 is affected by multiple buffer overflows that can allow remote code execution via a crafted QuickTime SWF/file, across Windows and Mac OS X. The issues arise from various integer- and buffer-overflow vulnerabilities in QuickTime’s handling of image/media formats; exploi...
CVE-2006-1465
Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime AVI video format file...
Apple QuickTime udta ATOM Heap Overflow
Apple QuickTime udta ATOM Heap Overflow By Sowhat of Nevis Labs Date: 2006.05.12 http://www.nevisnetworks.com http://secway.org/advisory/AD20060512.txt Vendor: Apple Inc. Affected Versions: Apple QuickTime versions 7.1 Overview: We have discovered a critical vulnerability in Quicktime Player. The...
[Full-disclosure] ZDI-06-015: Apple QuickTime H.264 Parsing Heap Overflow Vulnerability
ZDI-06-015: Apple QuickTime H.264 Parsing Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-015.html May 11, 2006 -- CVE ID: CVE-2006-1463 -- Affected Vendor: Apple -- Affected Products: Apple QuickTime versions prior to 7.1 -- TippingPointTM IPS Customer Protection:...
CVE-2006-1456: Undefined Security Weakness
Buffer overflow in QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted RTSP request, which is not properly handled during message logging...
CVE-2006-2238: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted BMP file that triggers the overflow in the ReadBMP function. NOTE: this issue was originally included as item 3 in CVE-2006-1983, but it has been given a separate identifier...
CVE-2006-1455: Undefined Security Weakness
QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to cause a denial of service crash and connection interruption via a QuickTime movie with a missing track, which triggers a null dereference...
CVE-2006-1462: Undefined Security Weakness
Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime H.264 M4V video format file...
CVE-2006-1463: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a H.264 M4V video format file with a certain modified size value...
CVE-2006-1453: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file containing malformed font information...
CVE-2006-1461: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash SWF file...
CVE-2006-1459: Undefined Security Weakness
Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to cause a denial of service or execute arbitrary code via a crafted QuickTime movie .MOV...
CVE-2006-1454: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file with malformed image data...
CVE-2006-1465: Undefined Security Weakness
Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime AVI video format file...
[Full-disclosure] [EEYEB-20060307] Apple QuickTime FPX Integer Overflow
Apple QuickTime FPX Integer Overflow Release Date: May 11, 2006 Date Reported: March 7, 2006 Patch Development Time In Days: 65 Severity: High Remote Code Execution Vendor: Apple Systems Affected: Quicktime on Windows 2000 Quicktime on Windows XP Quicktime on Mac OS X 10.3.9 References: This...
[Full-disclosure] Apple QuickDraw/QuickTime Multiple Vulnerabilities
McAfee, Inc. McAfee Averttm Labs Security Advisory Public Release Date: 2006-05-11 Apple QuickDraw/QuickTime Multiple Vulnerabilities CVE-2006-1249, CVE-2006-1453, CVE-2006-1454, CVE-2006-1459, CVE-2006-1460, CVE-2006-1461, CVE-2006-1462, CVE-2006-1464, CVE-2006-1465 Synopsis Apple QuickTime and...
CVE-2006-1460: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime movie .MOV, as demonstrated via a large size for a udta Atom...