3523 matches found
QuickTime < 7.6.8 Multiple Vulnerabilities (Windows)
Binary data 801185.prm...
Apple QuickTime QTPlugin.ocx _Marshaled_pUnk Code Execution (CVE-2010-1818)
QuickTime is a media player application developed by Apple. It is capable of playing back numerous multimedia file formats from local file system or network servers. Upon installation, Apple QuickTime also installs a web browser plugin, QTPlugin.ocx. A remote code execution vulnerability has been...
Month Of Abysssec Undisclosed Bugs - Apple QuickTime FlashPix
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 2 Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/apple-quicktime-flashpix-numberoftiles-vulnerability/ ''' ''' Title : Apple QuickTime FlashPix NumberOfTiles Remote Code...
Apple QuickTime Remote Code Execution Vulnerability
The host is installed with Apple QuickTime and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbapplequicktimecodeexecvulnwin.nasl 5263 2017-02-10 13:45:51Z teissa $ Apple QuickTime Remote Code Execution Vulnerability Authors: Antu Sanadi Copyright: Copyright c...
Apple QuickTime RCE Vulnerability
Apple QuickTime is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Apple QuickTime code execution
Memory corruption in ActiveX control...
ZDI-10-168: Apple QuickTime ActiveX _Marshaled_pUnk Remote Code Execution Vulnerability
ZDI-10-168: Apple QuickTime ActiveX MarshaledpUnk Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-168 August 31, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer...
Apple QuickTime FlashPix NumberOfTiles - Remote Code Execution
Apple QuickTime FlashPix NumberOfTiles - Remote Code Execution ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 2 Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/apple-quicktime-flashpix-numberoftiles-vulnerability/ ''' '''...
[0day] Apple QuickTime "_Marshaled_pUnk" backdoor param arbitrary code execution
HTML Version http://www.reversemode.com/index.php?option=comcontent&task=view&id=69&Itemid=1 The scenario would be as follows: Victim prerequisites: Internet Explorer. XP,Vista,W7. Apple Quicktime 7.x, 6.x 2004 versions are also vulnerable, older versions not checked 1. Victim is enticed into...
Apple QuickTime FlashPix NumberOfTiles Remote Code Execution
Exploit for windows platform in category dos / poc ============================================================ Apple QuickTime FlashPix NumberOfTiles Remote Code Execution ============================================================ ''' Title : Apple QuickTime FlashPix NumberOfTiles Remote Code...
Apple QuickTime FlashPix NumberOfTiles - Remote Code Execution
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 2 Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/apple-quicktime-flashpix-numberoftiles-vulnerability/ ''' ''' Title : Apple QuickTime FlashPix NumberOfTiles Remote Code...
QuickTime QTPlugin.ocx控件_Marshaled_pUnk参数验证漏洞
Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime ActiveX控件（QTPlugin.ocx）实现了IPersistPropertyBag2::Read（1000E330）来处理所接收到的param： .text:1000E330 .text:1000E330 ; =============== S U B R O U T I N E ======================================= .text:1000E330 .text:1000E330 .text:1000E330 sub1000E330 proc near ; DA...
Null pointer dereference
The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the MarshaledpUnk attribute, which triggers unmarshalling of an untrusted pointer...
CVE-2010-1818
CVE-2010-1818 affects Apple QuickTime QTPlugin.ocx (QuickTime 6.x and 7.x before 7.6.8). The vulnerability arises from an input validation error in the _Marshaled_pUnk parameter, triggering unmarshalling of an untrusted pointer and allowing remote code execution with the user’s privileges. Public...
CVE-2010-1818
The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the MarshaledpUnk attribute, which triggers unmarshalling of an untrusted pointer...
CVE-2010-1818: Access of Uninitialized Pointer
The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the MarshaledpUnk attribute, which triggers unmarshalling of an untrusted pointer...
Apple QuickTime ActiveX _Marshaled_pUnk Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the QTPlugin.ocx...
New Remote Flaw in Apple QuickTime Bypasses ASLR and DEP
A Spanish security researcher has discovered a new vulnerability in Apple’s QuickTime software that can be used to bypass both ASLR and DEP on current versions of Windows and give an attacker control of a remote PC. The flaw apparently results from a parameter from an older version of QuickTime...
Apple QuickTime _Marshaled_pUnk Backdoor Parameter Code Execution
HTML Version http://www.reversemode.com/index.php?option=comcontent&task=view&id=69&Itemid=1 The scenario would be as follows: Victim prerequisites: Internet Explorer. XP,Vista,W7. Apple Quicktime 7.x, 6.x 2004 versions are also vulnerable, older versions not checked 1. Victim is enticed into...
Apple QuickTime '_Marshaled_pUnk' Remote Code Execution Vulnerability
Description Apple QuickTime is prone to a remote code-execution vulnerability that affects the 'QTPlugin.ocx' ActiveX control because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful...