QuickTime < 7.7.2 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.7.2 and may be affected by the following vulnerabilities : - An uninitialized memory access issue exists in the handling of MP4 encoded files. CVE-2011-3458 - An off-by-one buffer overflow exists in the handling of rdrf...

PT-2012-2770

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.2 Description The issue is related to multiple stack-based buffer overflows that can be triggered via crafted TeXML files, potentially allowing remote attackers to execute arbitrary code or cause a denial ...

PT-2012-2778

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted .pict file. Recommendations For...

PT-2012-2447

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted pathname for a file. Recommendations For Apple QuickTime versions prior to 7.7.2, update...

PT-2012-2773

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.2 Description The issue is related to a stack-based buffer overflow in the plugin, which can be triggered by a crafted QTMovie object. This can allow remote attackers to execute arbitrary code or cause the...

CVE-2012-0663: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TeXML file...

CVE-2012-0667: Undefined Security Weakness

Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted QTVR movie file...

PT-2012-2776

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with Sorenson encoding. This is related to a buffer overflow in the Sorenson...

PT-2012-2774

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.2 Description The issue is related to an integer signedness error that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted QTVR movie file. This error occurs during...

CVE-2012-0665: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

Apple Releases QuickTime 7.7.2

Apple has released QuickTime 7.7.2 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review Apple Support Article HT5261 and apply any necessary updates ...

CVE-2012-0668: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with RLE encoding...

CVE-2012-0670: Undefined Security Weakness

Integer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted sean atom in a movie file...

CVE-2012-0671: Improper Control of Generation of Code

Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted .pict file...

CVE-2012-0666: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted QTMovie object...

PT-2012-2775

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with RLE encoding. This can lead to an application crash. Recommendations For...

PT-2012-2777

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.2 Description The issue is related to an integer overflow in Apple QuickTime, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted sean atom in a movie file...

PT-2012-2772

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.2 Description The issue is related to a heap-based buffer overflow that can be triggered by a crafted movie file with H.264 encoding, potentially allowing remote attackers to execute arbitrary code or caus...

CVE-2012-0669: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

CVE-2012-0664: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted text track in a movie file...