3526 matches found
PT-2014-5824
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.9.5 QuickTime versions prior to the fixed version Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MIDI file. This is due to a buffer overflow in...
CVE-2014-4979
Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed version number and flags in an mvhd atom...
Memory corruption
Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed version number and flags in an mvhd atom...
CVE-2014-4979
Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed version number and flags in an mvhd atom...
CVE-2014-4979
Apple QuickTime for Windows is affected by CVE-2014-4979 due to memory corruption in the mvhd atom when handling malformed version numbers and flags, potentially enabling arbitrary code execution or a crash. The issue is addressed in QuickTime 7.7.6, per the Apple security content; updating to th...
KLA10442 DoS vulnerability in QuickTime
An unknown vulnerability have been found in Apple QuickTime. Vulnerability can be exploited remotely via specially designed mvhd atom. Original advisories Apple bulletin Exploitation Related products Apple-QuickTime CVE list CVE-2014-4979 critical Solution Update to latest version Quicktime...
CVE-2014-4979: Improper Restriction of Operations within the Bounds of a Memory Buffer
Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed version number and flags in an mvhd atom...
PT-2014-6241
Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This is achieved via a malformed version number and flags in an mvhd...
(0Day) Apple QuickTime 'mvhd' Atom Heap Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the 'mvhd' atom...
Apple QuickTime TeXML Stack Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Apple QuickTime <= 6.5.2.10 (.qtif) Image Parsing Vulnerability
No description provided by source. Added qtif on milw0rm's sploits archive/ /str0ke Application: QuickTime http://www.apple.com/quicktime/ AFFECTED VERSION: Versions verified to be vulnerable: QuickTime.qts 6.5.2.10 and prior versions are affected. The bug: The problem specifically exists when...
Apple QuickTime <= 7.4.1 NULL Pointer Dereference Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35359/info Apple QuickTime is prone to a denial-of-service vulnerability. Note that an attacker will exploit this issue through the Safari browser by enticing a user to visit a malicious site. This will crash the user's...
Apple QuickTime PICT PnSize Buffer Overflow
No description provided by source. $Id: applequicktimepnsize.rb 13691 2011-09-03 21:17:58Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Apple QuickTime 6/7 FLC Movie COLOR_64 Chunk Overflow
No description provided by source. source: http://www.securityfocus.com/bid/19976/info Apple QuickTime is prone to multiple vulnerabilities because it fails to properly bounds-check and sanitize user-supplied data. An attacker can exploit these issues to execute arbitrary code in the context of t...
Apple Mac OS X 10.x .zip Parsing BOMStackPop() Function Overflow
No description provided by source. source: http://www.securityfocus.com/bid/17634/info Apple Mac OS X is reported prone to multiple security vulnerabilities. These issue affect Mac OS X and various applications including Safari, Preview, Finder, QuickTime, and BOMArchiveHelper. A remote attacker...
Apple QuickTime Player 7.7.2 Crash PoC
No description provided by source. !/usr/bin/perl Title : Apple QuickTime Player 7.7.2 Division By Zero Version : 7.7.21680.56 Date : 2012-10-23 Vendor : http://www.apple.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- Don't forget...
Joomla Component QuickTime VR 0.1 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Joomla Component QuickTime VR v 0.1 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : Mr.Al3FrItE & Islamic Security Team & Mounita20 & CoNaN and all musulmans hackers ComponentName: QuickTime VR...
Apple QuickTime 7.6.6 Invalid SMIL URI Buffer Overflow
No description provided by source. $Id: applequicktimesmildebug.rb 11513 2011-01-08 00:25:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Apple QuickTime/Darwin Streaming Server 4.1.x parse_xml.cgi File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6990/info A file retrieval vulnerability has been reported for QuickTime/Darwin Streaming Server. The vulnerability exists due to insufficient sanitization of some parameters given to the parsexml.cgi script. Information...
Apple Quicktime < 7.2 - SMIL Remote Integer Overflow PoC
No description provided by source. ---------------------------------------------------------------------- ATTACK VECTORS ---------------------------------------------------------------------- This vulnerability can be triggered by luring a target user into running a malicious SMIL file locally or...