CVE-2008-0485

Array index error in libmpdemux/demuxmov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag...

CVE-2008-0485

Array index error in libmpdemux/demuxmov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag...

CVE-2008-0485

The CVE-2008-0485 issue affects MPlayer 1.0_rc2 and earlier due to an array index error in libmpdemux/demux_mov.c when parsing MOV headers. A crafted QuickTime MOV file with a manipulated stsc atom tag can allow remote code execution (high impact). The Gentoo GLSA and Mandriva/open-source advisor...

CVE-2008-0485

Array index error in libmpdemux/demuxmov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag...

CVE-2008-0485

Array index error in libmpdemux/demuxmov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag...

CVE-2008-0485: Undefined Security Weakness

Array index error in libmpdemux/demuxmov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag...

US-CERT Technical Cyber Security Alert TA08-016A -- Apple QuickTime Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-016A Apple QuickTime Updates for Multiple Vulnerabilities Original release date: January 16, 2008 Last revised: -- Source: US-CERT Systems Affected Apple Mac OS X running versions of...

TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability

TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/TPTI-08-01.html January 15, 2008 -- CVE ID: CVE-2008-0033 -- Affected Vendor: Apple -- Affected Products: QuickTime Player 7.3 QuickTime PictureViewer 7.3 -- Vulnerability...

Apple QuickTime multiple security vulnerabilities

Buffer overflow on parsing Macintosh resources embedded into QuickTime movie. Quicktime Image IDSC atom memory corruption...

Design/Logic Flaw

Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption...

Buffer overflow

Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding...

Memory corruption

Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a movie file with Image Descriptor IDSC atoms containing an invalid atom size, which triggers memory corruption...

CVE-2008-0036

Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding...

CVE-2008-0033

Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a movie file with Image Descriptor IDSC atoms containing an invalid atom size, which triggers memory corruption...

CVE-2008-0032

Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption...

CVE-2008-0036

CVE-2008-0036 : Buffer overflow in Apple QuickTime prior to 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, triggering during decoding. Affected software: Apple QuickTime before 7.4. Root cause: overflow during decoding of the crafted PICT data. Impact i...

Memory corruption

Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Sorenson 3 video file, which triggers memory corruption...

CVE-2008-0033

Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a movie file with Image Descriptor IDSC atoms containing an invalid atom size, which triggers memory corruption...

CVE-2008-0033

Summary: CVE-2008-0033 affects Apple QuickTime prior to 7.4. The vulnerability resides in parsing of Image Descriptor (IDSC) atoms within QTIF image files, where specifying a malicious atom size can trigger an under- or mis-allocated heap condition, resulting in memory corruption. This can lead t...

CVE-2008-0036

Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding...