CVE-2011-3248: Undefined Security Weakness

Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font table in a QuickTime movie file...

CVE-2011-3249: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with FLC encoding...

CVE-2011-3250: Undefined Security Weakness

Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with JPEG2000 encoding...

Apple QuickTime 7.7.1之前版本TKHD 元素处理远程代码执行漏洞

BUGTRAQ ID: 50403 CVE ID: CVE-2011-3251 QuickTime是由苹果电脑所开发的一种多媒体架构，能够处理许多的数字视频、媒体段落、音效、文字、动画、音乐格式，以及交互式全景影像的数项类型。 Apple QuickTime 7.7.1之前版本在处理特制视频文件时存在远程代码执行漏洞，攻击者可利用此漏洞以当前用户权限执行任意代码，导致应用意外终止。此漏洞不影响Mac OS X系统。 Apple QuickTime Player 7.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Apple Mac OS X CoreMedia H.264编码视频文件缓冲区溢出漏洞

BUGTRAQ ID: 50068 CVE ID: CVE-2011-3219 Mac OS X是苹果家族机器所使用的操作系统。 Apple Mac OS X在实现上存在缓冲区溢出漏洞，此漏洞可影响CoreMedia组件，允许攻击者以当前用户权限执行任意代码。 当解析H.264流的Sequence Parameter Set数据时，会读取帧剪裁偏移字段，当这些字段包含错误数据时，Quicktime会最终在视频流所分配的缓冲区之外写入，造成任意代码执行。 Apple Mac OS X 10.x Apple MacOS X Server 10.6.x 厂商补丁： Apple -----...

PT-2011-4343

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via crafted TKHD atoms in a QuickTime movie fil...

PT-2011-4340

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1 Description The issue is related to an integer signedness error that allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. This can be achieve...

Apple Releases QuickTime 7.7.1

Apple has released QuickTime 7.7.1 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or obtain sensitive information. US-CERT encourages users and administrators to review Apple Support Article HT5016 a...

QuickTime < 7.7.1 Multiple Vulnerabilities

Binary data 801196.prm...

QuickTime < 7.7.1 Multiple Vulnerabilities

Binary data 6052.prm...

Apple QuickTime Atom Hierarachy Argument Size Mismatch Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

PT-2011-4339

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1 Description The issue is related to an integer overflow in Apple QuickTime, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted PICT file. This can lead to...

PT-2011-4341

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with FLC encoding. This can lead to an application crash. Recommendations For...

Apple Quicktime Empty URL Data Handler Remote Code Execution Vulnerability

This vulnerability allows remote attackers to potentially disclose memory addresses on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Apple QuickTime FLC Delta Decompression Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

Apple Quicktime PnPixPat PatType 3 Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple's QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Apple QuickTime FLC RLE Packet Count Decompression Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

Apple QuickTime H264 Matrix Conversion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

PT-2011-4342

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with JPEG2000 encoding. This can lead to an application crash. Recommendation...

Apple QuickTime H264 Stream frame_cropping Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...