Buffer overflow

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PNG file...

CVE-2011-3459

Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted rdrf atom in a movie file that triggers a buffer overflow...

CVE-2011-3460

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PNG file...

CVE-2011-3458

CVE-2011-3458 affects Apple QuickTime on macOS (OS X) prior to 10.7.3. The flaw is an uninitialized memory access during parsing of certain MP4 headers, allowing remote attackers to execute arbitrary code or cause an application crash via a crafted MP4 file. The impact is demonstrated as remote c...

CVE-2011-3459

Apple QuickTime on macOS X before 10.7.3 contains an off-by-one buffer overflow in handling of rdrf atoms within movie files, enabling remote code execution or denial of service. Exploitation requires a crafted file; user interaction may be needed. Apple released fixes in OS X Lion 10.7.3 (and re...

CVE-2011-3460

Apple QuickTime on Mac OS X before 10.7.3 contains a buffer overflow in PNG image decoding within the MediaVideo handling, allowing remote code execution or application crash when processing a crafted PNG file. This is the vulnerability identified as CVE-2011-3460. Public records corroborate a PN...

CVE-2011-3458

QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP4 file...

Apple Ships Huge Set of Patches for OS X

Apple has released a massive set of patches for a wide range of security vulnerabilities in a number of its products and components, including OSX Lion and QuickTime. The patches, which are rolled up in OS X 10.7.3, fix a slew of serious bugs, many of which can be used to execute remote code on...

Mac OS X 10.7.x < 10.7.3 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.3. The newer version contains multiple security-related fixes for the following components : - Address Book - Apache - ATS - CFNetwork - CoreMedia - CoreText - CoreUI - curl - Data Security - dovecot - filecmds - ImageI...

Mac OS X Multiple Vulnerabilities (Security Update 2012-001) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-001 applied. This update contains multiple security-related fixes for the following components : - Apache - ATS - ColorSync - CoreAudio - CoreMedia - CoreText - curl - Data Security - dovecot - filecmds ...

PT-2012-1704

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.3 QuickTime versions prior to the version in 10.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MP4 file, due to the failure to preven...

CVE-2011-3460: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PNG file...

CVE-2011-3459: Undefined Security Weakness

Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted rdrf atom in a movie file that triggers a buffer overflow...

CVE-2011-3458: Undefined Security Weakness

QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP4 file...

PT-2012-1705

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.3 QuickTime versions prior to the version in 10.7.3 Description The issue is caused by an off-by-one error in QuickTime, allowing remote attackers to execute arbitrary code or cause a denial of service via...

PT-2012-1706

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted PNG file. This is related to a buffer overflow in QuickTime. Recommendations For version...

ZDI-12-004 : Apple Quicktime JPEG2000 COD Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-004 : Apple Quicktime JPEG2000 COD Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-004 January 5, 2012 - -- CVE ID: CVE-2011-3250 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors: Apple - -...

ZDI-12-005 : Apple Quicktime RLE BGRA Decoding Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-005 : Apple Quicktime RLE BGRA Decoding Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-005 January 5, 2012 - -- CVE ID: CVE-2011-3248 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors: Appl...

Apple Quicktime RLE BGRA Decoding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

ZDI-11-340 : Apple Quicktime Font Table Signed Length Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-340 : Apple Quicktime Font Table Signed Length Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-340 December 7, 2011 - -- CVE ID: CVE-2011-3248 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected...