CVE-2014-1249

CVE-2014-1249 affects Apple QuickTime before 7.7.5. The vulnerability is a buffer overflow in the PSD image handling used by QuickTime, which can lead to remote arbitrary code execution or an application crash. Connected sources corroborate a PSD-related overflow in QuickTime, with multiple OpenV...

CVE-2014-1250

CVE-2014-1250 affects Apple QuickTime prior to 7.7.5. The issue is described as an out-of-bounds memory access caused by improper byte-swapping in the ttfo element of a movie file, enabling remote code execution or a crash. The connected sources corroborate QuickTime-related vulnerabilities and l...

CVE-2014-1244

Apple QuickTime contains a buffer overflow in the H.264 handling path that can allow remote code execution or denial of service when processing a crafted movie file, affecting QuickTime versions prior to 7.7.5 (Windows). The issue is one of multiple vulnerabilities described for QuickTime fixed i...

CVE-2014-1247

CVE-2014-1247 affects Apple QuickTime prior to 7.7.5. A flaw in handling of dref atoms (as described in ZDI-14-046) can allow remote code execution or memory corruption when a user opens a crafted movie file or visits a malicious page; user interaction is required. Impact is execution of arbitrar...

CVE-2014-1247

Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted dref atom in a movie file...

CVE-2014-1243

Apple QuickTime before 7.7.5 is affected by CVE-2014-1243 due to an uninitialized pointer in track list handling, allowing remote arbitrary code execution or a crash when processing crafted movie files. Exploitation is described in multiple sources (e.g., ZDI-14-044 states a nam atom parsing flaw...

CVE-2014-1246: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ftab atom in a movie file...

CVE-2014-1251: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted clef atom in a movie file...

CVE-2014-1248: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ldat atom in a movie file...

CVE-2014-1245: Undefined Security Weakness

Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted stsz atom in a movie file...

CVE-2014-1250: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted ttfo element in a movie file...

CVE-2014-1249: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PSD image...

CVE-2014-1243: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted track list in a movie file...

CVE-2014-1244: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

CVE-2014-1247: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted dref atom in a movie file...

Apple Releases QuickTime 7.7.5

Apple has released QuickTime 7.7.5 for Windows operating systems to address multiple vulnerabilities, which may lead to an unexpected application termination or arbitrary code execution. US-CERT encourages users and administrators to review Apple Support Article HT6151 and apply any necessary...

Apple Quicktime 7.7.5 Multiple Vulnerabilities

Binary data 8140.prm...

Apple Mac OS X多个安全漏洞(APPLE-SA-2014-02-25-1)

BUGTRAQ ID: 65777 CVECAN ID: CVE-2014-1254,CVE-2014-1262,CVE-2014-1255,CVE-2014-1256,CVE-2014-1257,CVE-2014-1258,CVE-2014-1261,CVE-2014-1263,CVE-2014-1265,CVE-2014-1259,CVE-2014-1264,CVE-2014-1260,CVE-2014-1246,CVE-2014-1247,CVE-2014-1248,CVE-2014-1249,CVE-2014-1250,CVE-2014-1245 OS X（前称Mac OS...

PT-2014-4032

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted ftab atom in a movie file. Recommendations For versions prior to 7.7.5, update to versio...

PT-2014-4030

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with H.264 encoding. This is related to a buffer overflow in the handling of...