Mac OS X 10.10.x < 10.10.4 Multiple Vulnerabilities (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.4. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl - AppleThunderboltEDMService - ATS - Bluetooth -...

Apple QuickTime GIF Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple QuickTime alis Atom Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple QuickTime Plugin Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple QuickTime GIF Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple QuickTime SGI Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple Releases Security Updates for QuickTime, Safari, Mac EFI, OS X Yosemite, and iOS

Apple has released security updates for QuickTime, Safari, Mac Extensible Firmware Interface EFI, OS X Yosemite, and iOS. Exploitation of some of these vulnerabilities may allow an attacker to obtain elevated privileges or crash applications. Available updates include: QuickTime 7.7.7 for Windows...

PT-2015-6268

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a heap buffer overflow in SGI image file handling, which can lead to remote code execution. Recommendations At the moment, there is no information about a newe...

PT-2015-6261

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a remote code execution vulnerability due to an out-of-bounds write when handling GIF files. Recommendations At the moment, there is no information about a new...

PT-2015-6265

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a code Atom Use-After-Free Remote Code Execution problem. No specific details about affected devices, real-world incidents, or technical exploitation details...

PT-2015-6262

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a remote code execution vulnerability due to an out-of-bounds write when handling GIF files. Recommendations At the moment, there is no information about a new...

PT-2015-6264

Name of the Vulnerable Software and Affected Versions Apple QuickTime Plugin affected versions not specified Description The issue is related to a use-after-free remote code execution problem. No information is provided about the estimated number of potentially affected devices or real-world...

PT-2015-6263

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a stack buffer overflow in Apple QuickTime, allowing remote code execution. Recommendations At the moment, there is no information about a newer version that...

PT-2015-6266

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663,...

PT-2015-6260

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a remote code execution problem in Apple QuickTime's SGI parsing functionality. Recommendations At the moment, there is no information about a newer version th...

KLA10621 Multiple vulnerabilities in Apple QuickTime

Memory corruption vulnerabilities were found in Apple QuickTime. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed file. Original advisories Apple advisory Exploitatio...

PT-2015-6267

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663,...

Apple Quicktime Corrupt stbl Atom Remote Code Execution Vulnerability

Talos Vulnerability Report TALOS-2015-0018 Apple Quicktime Corrupt stbl Atom Remote Code Execution Vulnerability June 30, 2015 CVE Number CVE-2015-3667 Description There is a remote code execution vulnerability in Apple Quicktime. An attacker who can control the data inside an stbl atom in a .mov...

KLA10653 Code execution vulnerability in QuickTime

An unspecified vulnerability was found in QuickTime. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories Apple advisory Exploitation Public exploits...

Microsoft DirectShow Size Validation Remote Code Execution (MS09-028) - Ver2 (CVE-2009-1539)

Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. The vulnerability is due to an error in the Microsoft DirectShow component that fails to properly validate certain size fields within...