Win32 binary codecs: Multiple vulnerabilities

Background Win32 binary codecs provide support for video and audio playback. Description Multiple buffer overflow, heap overflow, and integer overflow vulnerabilities were discovered in the Quicktime plugin when processing MOV, FLC, SGI, H.264 and FPX files. Impact A remote attacker could entice ...

Update IPS-1 with a Protection against Apple QuickTime and Apple QuickDraw Vulnerabilities

Several vulnerabilities have been identified within various versions of Apple QuickTime and Apple QuickDraw that, if exploited, would allow a remote attacker to execute arbitrary code on a vulnerable system...

Apple QuickTime QTPlugin.ocx ActiveX控件多个栈溢出漏洞

BUGTRAQ ID: 27769 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime所安装的QTPlugin.ocx ActiveX控件在处理畸形参数数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 QTPlugin.ocx ActiveX控件没有正确地验证对SetBgColor、SetHREF、SetMovieName、SetTarget和SetMatrix函数的输入，如果用户受骗访问了恶意网页并向这些函数传送了超长字符串的话，就可能触发栈溢出，导致执行任意指令。 Apple QuickTime Player = 7.4.1 临时解决方法...

Stack overflow

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...

CVE-2008-0778

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...

CVE-2008-0778

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...

CVE-2008-0778

Multiple stack-based buffer overflows exist in the QTPlugin.ocx ActiveX control of Apple QuickTime 7.4.1 and earlier. The vulnerability affects the QTPlugin.ocx component and is triggered by long arguments to the SetBgColor, SetHREF, SetMovieName, SetTarget, and SetMatrix methods, allowing remote...

EUVD-2008-0788

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...

CVE-2008-0778: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...

QuickTime 7.4.1 QTPlugin.ocx Multiple Stack Overflow Vulnerabilities

No description provided by source. Application: QuickTime = 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow Web Site: http://www.apple.com/fr/quicktime/download/ Platform: Windows Bug: Multiple Remote Stack Overflow ------------------------------------------------------- 1 Introduction 2 Bug...

aquick-overflow.txt

Application: QuickTime sub test bar = String515305, "A" foo.SetBgColor bar End Sub ===== 5Credits ===== laurent gaffié laurent.gaffieremovethisatgmaildotcom...

QuickTime 7.4.1 QTPlugin.ocx Multiple Stack Overflow Vulnerabilities

Exploit for unknown platform in category dos / poc ==================================================================== QuickTime 7.4.1 QTPlugin.ocx Multiple Stack Overflow Vulnerabilities ==================================================================== Application: QuickTime sub test bar =...

QuickTime 7.4.1 - QTPlugin.ocx Multiple Stack Overflow Vulnerabilities

QuickTime 7.4.1 - QTPlugin.ocx Multiple Stack Overflow Vulnerabilities Application: QuickTime sub test bar = String515305, "A" foo.SetBgColor bar End Sub ===== 5Credits ===== laurent gaffié laurent.gaffieremovethisatgmaildotcom milw0rm.com 2008-02-13...

QuickTime <= 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow

Application: QuickTime = 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow Web Site: http://www.apple.com/fr/quicktime/download/ Platform: Windows Bug: Multiple Remote Stack Overflow ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits...

Apple QuickTime ActiveX buffer overflow

Multiple buffer overflows in different methods and properties...

QuickTime 7.4.1 - 'QTPlugin.ocx' Multiple Stack Overflow Vulnerabilities

Application: QuickTime sub test bar = String515305, "A" foo.SetBgColor bar End Sub ===== 5Credits ===== laurent gaffié laurent.gaffieremovethisatgmaildotcom milw0rm.com 2008-02-13...

QuickTime < 7.4.1 RTSP Response Handling Overflow

Binary data 4363.prm...

QuickTime < 7.4.1 RTSP Response Long Reason-Phrase Arbitrary Remote Code Execution (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.4.1. Such versions contain a heap-based buffer overflow in the application's handling of HTTP responses when RTSP tunneling is enabled. If an attacker can trick a user into visiting a specially crafted webpage, arbitrar...

QuickTime < 7.4.1 RTSP Response Long Reason-Phrase Arbitrary Remote Code Execution (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.4.1. Such versions contain a heap buffer overflow in the application's handling of HTTP responses when RTSP tunneling is enabled. If an attacker can trick a user to visit a specially crafted webpage, he may be able to ...

DEBIAN-CVE-2008-0485

Array index error in libmpdemux/demuxmov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag...