Apple QuickTime SGI Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple QuickTime Plugin Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Mac OS X Multiple Vulnerabilities (Security Update 2015-005) (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-005. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl -...

PT-2015-6262

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a remote code execution vulnerability due to an out-of-bounds write when handling GIF files. Recommendations At the moment, there is no information about a new...

KLA10621 Multiple vulnerabilities in Apple QuickTime

Memory corruption vulnerabilities were found in Apple QuickTime. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed file. Original advisories Apple advisory Exploitatio...

PT-2015-6260

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a remote code execution problem in Apple QuickTime's SGI parsing functionality. Recommendations At the moment, there is no information about a newer version th...

PT-2015-6266

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663,...

PT-2015-6267

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663,...

PT-2015-6268

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a heap buffer overflow in SGI image file handling, which can lead to remote code execution. Recommendations At the moment, there is no information about a newe...

PT-2015-6261

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a remote code execution vulnerability due to an out-of-bounds write when handling GIF files. Recommendations At the moment, there is no information about a new...

PT-2015-6264

Name of the Vulnerable Software and Affected Versions Apple QuickTime Plugin affected versions not specified Description The issue is related to a use-after-free remote code execution problem. No information is provided about the estimated number of potentially affected devices or real-world...

PT-2015-6263

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a stack buffer overflow in Apple QuickTime, allowing remote code execution. Recommendations At the moment, there is no information about a newer version that...

PT-2015-6265

Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue is related to a code Atom Use-After-Free Remote Code Execution problem. No specific details about affected devices, real-world incidents, or technical exploitation details...

Apple Releases Security Updates for QuickTime, Safari, Mac EFI, OS X Yosemite, and iOS

Apple has released security updates for QuickTime, Safari, Mac Extensible Firmware Interface EFI, OS X Yosemite, and iOS. Exploitation of some of these vulnerabilities may allow an attacker to obtain elevated privileges or crash applications. Available updates include: QuickTime 7.7.7 for Windows...

Apple Quicktime Corrupt stbl Atom Remote Code Execution Vulnerability

Talos Vulnerability Report TALOS-2015-0018 Apple Quicktime Corrupt stbl Atom Remote Code Execution Vulnerability June 30, 2015 CVE Number CVE-2015-3667 Description There is a remote code execution vulnerability in Apple Quicktime. An attacker who can control the data inside an stbl atom in a .mov...

KLA10653 Code execution vulnerability in QuickTime

An unspecified vulnerability was found in QuickTime. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories Apple advisory Exploitation Public exploits...

Apple Quicktime MJPEG Frame stsd Atom Heap Overflow - Ver2 (CVE-2013-1020)

A buffer overflow vulnerability has been reported in Apple Quicktime. The vulnerability is due to improper processing of mjpeg movies with an improper jpeg frame size in the stsd atom. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...

Microsoft DirectShow Size Validation Remote Code Execution (MS09-028) - Ver2 (CVE-2009-1539)

Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. The vulnerability is due to an error in the Microsoft DirectShow component that fails to properly validate certain size fields within...

Apple QuickTime PICT Image Parsing Malformed Records - Ver2 (CVE-2009-0010)

Apple QuickTime is a multimedia player that supports a wide range of media formats. A buffer overflow vulnerability has been reported in Apple QuickTime. A remote attacker can exploit this vulnerability via a specially crafted PICT file - an image file format that can be processed by the QuickTim...

Apple-QuickTime-7.5-(.m3u)

Apple QuickTime is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result i...