CVE-2009-0386: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the qtdemuxparsesamples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins aka gst-plugins-good 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample ctts atom data in a malformed QuickTime medi...

US-CERT Technical Cyber Security Alert TA09-022A -- Apple QuickTime Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-022A Apple QuickTime Updates for Multiple Vulnerabilities Original release date: January 22, 2009 Last revised: -- Source: US-CERT Systems Affected Apple QuickTime 7.5 for Windows and Mac...

Apple QuickTime Multiple Vulnerabilities - Jan09 (Windows)

The host is installed with Apple QuickTime and is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplequicktimemultvulnjan09win.nasl 6519 2017-07-04 14:08:14Z cfischer $ Apple QuickTime Multiple Vulnerabilities - Jan09 Windows Authors: Chandan S Copyright: Copyright c 20...

Apple QuickTime multiple security vulnerabilities

Memory corruptions on Cinepak, VR Track, STSD, AVI parsing...

Apple QuickTime Multiple Vulnerabilities (Jan 2009) - Windows

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

CVE-2009-0008

Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted MPEG-2 movie...

CVE-2009-0008

The CVE-2009-0008 issue affects Apple QuickTime MPEG-2 Playback Component (Windows) prior to version 7.60.92.0. Documents describe a vulnerability where processing a crafted MPEG-2 movie can cause an application crash (DoS) or allow remote code execution. Exploitation described in sources indicat...

CVE-2009-0008

Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted MPEG-2 movie...

QuickTime < 7.6 Multiple Vulnerabilities

Binary data 4817.prm...

ZDI-09-008: Apple QuickTime STSD JPEG Atom Heap Corruption Vulnerability

ZDI-09-008: Apple QuickTime STSD JPEG Atom Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-008 January 21, 2009 -- CVE ID: CVE-2009-0007 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-09-005: Apple QuickTime VR Track Header Atom Heap Corruption Vulnerability

ZDI-09-005: Apple QuickTime VR Track Header Atom Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-005 January 21, 2009 -- CVE ID: CVE-2009-0002 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint...

CVE-2009-0008: Improper Input Validation

Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted MPEG-2 movie...

ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability

ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-007 January 21, 2009 -- CVE ID: CVE-2009-2006 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IP...

gstreamer-plugins-good -- multiple memory overflows

Secunia reports: Tobias Klein has reported some vulnerabilities in GStreamer Good Plug-ins, which can potentially be exploited by malicious people to compromise a vulnerable system. A boundary error occurs within the "qtdemuxparsesamples" function in gst/gtdemux/qtdemux.c when performing QuickTim...

ZDI-09-006: Apple QuickTime AVI Header nBlockAlign Heap Corruption Vulnerability

ZDI-09-006: Apple QuickTime AVI Header nBlockAlign Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-006 January 21, 2009 -- CVE ID: CVE-2009-0003 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoin...

QuickTime < 7.6 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.6. Such versions contain several vulnerabilities : - A heap-based buffer overflow in QuickTime's handling of RTSP URLs may lead to an application crash or arbitrary code execution. CVE-2009-0001 - A heap-based buffer...

QuickTime < 7.6 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of RTSP URLs may lead to an application crash or arbitrary code execution. CVE-2009-0001 - A heap buffer overflow in...

Heap overflow

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms...

Memory corruption

Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted H.263 encoded movie file that triggers memory corruption...

Heap overflow

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms...