3523 matches found
CVE-2014-4979
Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed version number and flags in an mvhd atom...
CVE-2014-4979
Apple QuickTime for Windows is affected by CVE-2014-4979 due to memory corruption in the mvhd atom when handling malformed version numbers and flags, potentially enabling arbitrary code execution or a crash. The issue is addressed in QuickTime 7.7.6, per the Apple security content; updating to th...
CVE-2014-4979: Improper Restriction of Operations within the Bounds of a Memory Buffer
Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed version number and flags in an mvhd atom...
KLA10442 DoS vulnerability in QuickTime
An unknown vulnerability have been found in Apple QuickTime. Vulnerability can be exploited remotely via specially designed mvhd atom. Original advisories Apple bulletin Exploitation Related products Apple-QuickTime CVE list CVE-2014-4979 critical Solution Update to latest version Quicktime...
(0Day) Apple QuickTime 'mvhd' Atom Heap Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the 'mvhd' atom...
PT-2014-6241
Name of the Vulnerable Software and Affected Versions Apple QuickTime affected versions not specified Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This is achieved via a malformed version number and flags in an mvhd...
Apple QuickTime/Darwin Streaming MP3Broadcaster 0 ID3 Tag Handling Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7660/info MP3Broadcaster is shipped as part of Darwin Streaming Server software. MP3Broadcaster has been reported prone to a vulnerability when processing malicious ID3 tags. This is likely due to insufficient sanity chec...
Apple QuickTime <= 6.5.2.10 (.qtif) Image Parsing Vulnerability
No description provided by source. Added qtif on milw0rm's sploits archive/ /str0ke Application: QuickTime http://www.apple.com/quicktime/ AFFECTED VERSION: Versions verified to be vulnerable: QuickTime.qts 6.5.2.10 and prior versions are affected. The bug: The problem specifically exists when...
Apple QuickTime <= 7.1.5 Information Disclosure and Multiple Code Execution Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24873/info Apple QuickTime is prone to an information-disclosure and multiple remote code-execution vulnerabilities. Remote attackers may exploit these issues by enticing victims into opening maliciously crafted files or...
Joomla Component QuickTime VR 0.1 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Joomla Component QuickTime VR v 0.1 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : Mr.Al3FrItE & Islamic Security Team & Mounita20 & CoNaN and all musulmans hackers ComponentName: QuickTime VR...
Apple QuickTime <= 7.4.1 NULL Pointer Dereference Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35359/info Apple QuickTime is prone to a denial-of-service vulnerability. Note that an attacker will exploit this issue through the Safari browser by enticing a user to visit a malicious site. This will crash the user's...
Apple QuickTime 7.1.3 Plug-In Arbitrary Script Execution Weakness
No description provided by source. source: http://www.securityfocus.com/bid/20138/info Apple QuickTime plug-in is prone to an arbitrary-script-execution weakness when executing QuickTime Media Link files .qtl. An attacker can exploit this issue to execute arbitrary script code in the context of t...
Safari + Quicktime <= 7.3 RTSP Content-Type Remote BOF Exploit
No description provided by source. !/usr/bin/perl quickbite.pl Safari + Quicktime = 7.3 RTSP Content-Type overflow exploit for Mac OS X Intel Tested with OS X 10.4. On victim, browse to http://server:8080/ Binds shell on port 4444. by krafty greets to sk, halvar, grugq, and all the ethnical hacke...
Apple QuickTime Image Description Atom Sign Extension PoC
No description provided by source. print -----------BID 35166---------- print w3bd3vil at gmail dot com print Apple QuickTime Image Description Atom Sign Extension Vulnerability PoC print -----------BID 35166---------- bytes = 0x00, 0x00, 0x00, 0x08, 0x77, 0x69, 0x64, 0x65, 0x00, 0x02, 0xD6, 0x48...
Apple QuickTime 6.4/6.5/7.0.x PictureViewer JPEG/PICT File Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16212/info Apple QuickTime is prone to a buffer-overflow vulnerability because the application fails to do proper bounds checking on user-supplied data before copying it to finite-sized process buffers. An attacker may be...
Apple Safari & Quicktime Denial of Service Vulnerability
No description provided by source. Apple Safari & Quicktime Denial of Service Shameless plug : ------------------------------------------------------------------------ You are invited to join the 2009 edition of HACK.LU, a small but concentrated luxemburgish security conference. More information ...
Apple QuickTime/Darwin Streaming Server 4.1.x parse_xml.cgi File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6990/info A file retrieval vulnerability has been reported for QuickTime/Darwin Streaming Server. The vulnerability exists due to insufficient sanitization of some parameters given to the parsexml.cgi script. Information...
QuickTime Picture Viewer 7.6.6 JP2000 Denial of Service Vulnerability
No description provided by source. done by BraniX [email protected] www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: QuickTime PictureViewer 7.6.6 DoS, Access Violation Exception PictureViewer.exe MD5: B2859391D32DBBFCE00FD2F641863954...
Quicktime Player <= 7.3.1.70 (rtsp) Buffer Overflow Vulnerability
No description provided by source. Luigi Auriemma Application: Quicktime Player http://www.apple.com/quicktime Versions: = 7.3.1.70 Platforms: Windows and Mac Bug: buffer-overflow Exploitation: remote Date: 10 Jan 2008 Thanx to: swirl for the help during the re-testing of the bug Author: Luigi...
Apple QuickTime 6.5.1 PictureViewer Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12905/info Apple QuickTime is reportedly prone to a buffer overflow when viewing malformed image files. This issue was reported to exist in QuickTime 6.5.1 for Windows. Other versions may also be affected. import struct...