Apple QuickTime Multiple Vulnerabilities - Nov12 (Windows)

This host is installed with Apple QuickTime and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplequicktimemultvulnnov12win.nasl 5931 2017-04-11 09:02:04Z teissa $ Apple QuickTime Multiple Vulnerabilities - Nov12 Windows Authors: Rachana Shetty Copyright: Copyright c 20...

Apple QuickTime 7.7.3之前版本多个任意代码执行漏洞

BUGTRAQ ID: 56438 CVE ID: CVE-2011-1374,CVE-2012-3751,CVE-2012-3752,CVE-2012-3753,CVE-2012-3754,CVE-2012-3755,CVE-2012-3756,CVE-2012-3757,CVE-2012-3758 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 QuickTime 7.7.3之前版本存在多个安全漏洞，在处理特制的文件时，可允许攻击者以当前登录用户权限执行任意代码。...

CVE-2012-3753: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIME type...

CVE-2012-3754: Undefined Security Weakness

Use-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2012-3758: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted transform attribute in a text3GTrack element in a QuickTime TeXML file...

CVE-2012-3751: Undefined Security Weakness

Use-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via an HTML document with a crafted qtactivex parameter in an OBJECT element...

CVE-2012-3755: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Targa image...

CVE-2012-3757: Undefined Security Weakness

Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PICT file...

Apple QuickTime multiple security vulnerabilities

Multiple memory corruptions on different file formats and server responses parsing and in ActiveX components...

PT-2012-4994

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.3 Description The issue is related to a use-after-free vulnerability in the Clear method of the ActiveX control. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of...

PT-2012-1511

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted REGION record in a PICT file. This can lead to an application crash. Recommendations For...

CVE-2012-3752: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted style element in a QuickTime TeXML file...

PT-2012-4993

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.3 Description The issue is related to a buffer overflow in the plugin, which can be triggered by a crafted MIME type. This can lead to the execution of arbitrary code or cause a denial of service, resultin...

PT-2012-4995

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Targa image. This can lead to an application crash. Recommendations For Apple QuickTime...

PT-2012-4998

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted transform attribute in a text3GTrack element in a QuickTime TeXML file. Recommendations...

PT-2012-4996

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.3 Description A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted rnet box in an MP4 movie file. Recommendations For versions prior to 7.7.3...

PT-2012-4992

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted style element in a QuickTime TeXML file. This is due to multiple buffer overflows in the...

PT-2012-4997

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted PICT file. Recommendations For...

PT-2012-4991

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.3 Description The issue is related to a use-after-free vulnerability in the plugin, which can be exploited by remote attackers through an HTML document with a crafted qtactivex parameter in an OBJECT...

CVE-2012-3756: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted rnet box in an MP4 movie file...