Lucene search
K

48 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/29 3:5 a.m.14 views

Malicious code in sorenson-webfonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45b3e803fc04f697e067f5dfbc9a9c37878d1b7faed2ad4aea69dd9bed25c32 [email protected] is a hollow package: index.js is a 2-line stub 'use strict'; module.exports = ;, author/description fields are empty, and th...

5.8AI score
Exploits0References2
OSV
OSV
added 2026/05/29 3:5 a.m.5 views

MAL-2026-5028 Malicious code in sorenson-webfonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45b3e803fc04f697e067f5dfbc9a9c37878d1b7faed2ad4aea69dd9bed25c32 [email protected] is a hollow package: index.js is a 2-line stub 'use strict'; module.exports = ;, author/description fields are empty, and th...

5.8AI score
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-0549

Malware in sbrugna...

6.8CVSS4.4AI score0.02865EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2013-1059

Malware in sbrugna...

9.3CVSS6.1AI score0.05616EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2012-3669

Malware in sbrugna...

6.8CVSS6.1AI score0.02905EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2009-0197

Malware in sbrugna...

9.3CVSS6.1AI score0.0486EPSS
Exploits0References11
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.28 views

Apple QuickTime Sorenson Video mdat Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

7.5CVSS3.5AI score0.05616EPSS
Exploits0References1
securityvulns
securityvulns
added 2013/05/27 12:0 a.m.90 views

APPLE-SA-2013-05-22-1 QuickTime 7.7.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-22-1 QuickTime 7.7.4 QuickTime 7.7.4 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Opening a maliciously crafted TeXML file may lead to an unexpected application...

9.3CVSS0.7AI score0.32553EPSS
Exploits12
NVD
NVD
added 2013/05/24 4:43 p.m.20 views

CVE-2013-1019

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

9.3CVSS7.6AI score0.05616EPSS
Exploits0References7
Prion
Prion
added 2013/05/24 4:43 p.m.20 views

Buffer overflow

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

9.3CVSS8.3AI score0.05616EPSS
Exploits0References7Affected Software2
Cvelist
Cvelist
added 2013/05/24 10:0 a.m.28 views

CVE-2013-1019

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

7.6AI score0.05616EPSS
Exploits0References7
CVE
CVE
added 2013/05/24 10:0 a.m.64 views

CVE-2013-1019

CVE-2013-1019 is a vulnerability in Apple QuickTime’s handling of Sorenson-encoded movie data. According to the ZDI advisory (ZDI-13-118), processing a malformed Sorenson Video 3 mdat section in a QuickTime movie can enable remote code execution on vulnerable QuickTime implementations, with user ...

9.3CVSS7.7AI score0.05616EPSS
Exploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2012/09/27 12:0 a.m.39 views

Apple TV < 5.1 Multiple Vulnerabilities

According to its banner, the remote Apple TV 2nd generation or later device has a version of iOS that is prior to 5.1. It is, therefore, reportedly affected by several vulnerabilities : - An uninitialized memory access issue in the handling of Sorenson encoded movie files could lead to arbitrary...

9.3CVSS8.9AI score0.73164EPSS
Exploits4References24
NVD
NVD
added 2012/09/20 9:55 p.m.26 views

CVE-2012-3722

The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

6.8CVSS7.4AI score0.02905EPSS
Exploits0References5
Prion
Prion
added 2012/09/20 9:55 p.m.22 views

Memory corruption

The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

6.8CVSS7.9AI score0.02905EPSS
Exploits0References5Affected Software3
CVE
CVE
added 2012/09/20 9:0 p.m.66 views

CVE-2012-3722

CVE-2012-3722 concerns an uninitialized memory access in the Sorenson codec used by QuickTime on macOS (before 10.7.5) and CoreMedia on iOS (before 6). The flaw allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Sorenson-encoded movie file. References ind...

6.8CVSS7.5AI score0.02905EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2012/09/20 9:0 p.m.28 views

CVE-2012-3722

The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

7.4AI score0.02905EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2012/05/18 12:0 a.m.23 views

QuickTime < 7.7.2 Multiple Vulnerabilities

Binary data 801194.prm...

9.3CVSS7.8AI score0.28623EPSS
Exploits24References18
OpenVAS
OpenVAS
added 2012/05/18 12:0 a.m.72 views

Apple QuickTime Multiple Vulnerabilities - Windows

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

9.3CVSS5.1AI score0.28623EPSS
Exploits24References20
NVD
NVD
added 2012/05/16 10:12 a.m.21 views

CVE-2012-0669

Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

9.3CVSS7.6AI score0.04997EPSS
Exploits1References5
Rows per page
Query Builder