3523 matches found
Apple Patches Mass of Security Bugs in OS X and Safari
Apple has updated both OS X and its Safari browser, fixing a pile of security vulnerabilities, many of which can be used for remote code execution. The release of OS X Mountain Lion 10.8.4 includes patches for more than 30 bugs, most notably a set of fixes for vulnerabilities in Ruby, some of whi...
Mac OS X 10.8.x < 10.8.4 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.4. The newer version contains multiple security-related fixes for the following components : - CFNetwork - CoreAnimation - CoreMedia Playback - CUPS - Disk Management - OpenSSL - QuickDraw Manager - QuickTime - SMB C...
Mac OS X Multiple Vulnerabilities (Security Update 2013-002)
The remote host is running a version of Mac OS X 10.6 or 10.7 that does not have Security Update 2013-002 applied. This update contains numerous security-related fixes for the following components : - CoreMedia Playback 10.7 only - Directory Service 10.6 only - OpenSSL - QuickDraw Manager -...
Apple QuickTime 'enof' atoms处理缓冲区溢出漏洞
Bugtraq ID:60086 CVE ID:CVE-2013-0986 Apple QuickTime是一款拥有强大的多媒体技术的内置媒体播放器。 Apple QuickTime处理包含特制'enof' atoms的电影文件时存在一个缓冲区溢出漏洞，允许远程攻击者利用漏洞构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码。 0 Apple QuickTime 7.7.4 厂商解决方案 Apple QuickTime 7.7.4已经修复此漏洞，建议用户下载更新： http://www.apple.com...
Apple QuickTime dref Volume Name Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of a...
PT-2013-6306
Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a memory corruption problem that can lead to remote code execution. Recommendations At the moment, there is no information about a newer version that contains ...
Apple QuickTime MP3 Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
QuickTime < 7.7.4 Multiple Vulnerabilities (Windows)
The version of QuickTime installed on the remote Windows host is older than 7.7.4. It is, therefore, reportedly affected by the following vulnerabilities : - Buffer overflow vulnerabilities exist in the handling of 'dref' atoms, 'enof' atoms, 'mvhd' atoms, FPX files, MP3 files, H.263 and H.264...
Apple Releases Security Updates for Apple QuickTime 7.7.4
Apple has released security updates for Apple QuickTime 7.7.4 for Windows 7, Vista, and XP SP2 or later to address multiple vulnerabilities. These vulnerabilities could allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and...
Apple QuickTime multiple security vulnerabilities
Memory corruptions on different formats and protocols parsing...
APPLE-SA-2013-05-22-1 QuickTime 7.7.4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-22-1 QuickTime 7.7.4 QuickTime 7.7.4 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Opening a maliciously crafted TeXML file may lead to an unexpected application...
CVE-2013-1018
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...
CVE-2013-1022
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted mvhd atoms in a movie file...
CVE-2013-0986
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted enof atoms in a movie file...
CVE-2013-0989
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP3 file...
CVE-2013-1015
Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted TeXML file...
CVE-2013-1017
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted dref atoms in a movie file...
CVE-2013-1019
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...