Lucene search
K

48 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/29 3:5 a.m.10 views

Malicious code in sorenson-webfonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ebdc541a49aeb340c75d6a96abee6465496dc22a04e82be2f03b85b2be1c3881 The OpenSSF Package Analysis project identified 'sorenson-webfonts' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

5.8AI score
Exploits0
OSV
OSV
added 2026/05/29 3:5 a.m.3 views

MAL-2026-5028 Malicious code in sorenson-webfonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ebdc541a49aeb340c75d6a96abee6465496dc22a04e82be2f03b85b2be1c3881 The OpenSSF Package Analysis project identified 'sorenson-webfonts' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

5.8AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-1059

Malware in sbrugna...

9.3CVSS6.1AI score0.03632EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-0197

Malware in sbrugna...

9.3CVSS6.1AI score0.09031EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-3669

Malware in sbrugna...

6.8CVSS6.1AI score0.02122EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2010-0549

Malware in sbrugna...

6.8CVSS4.4AI score0.02057EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.26 views

Apple QuickTime Sorenson Video mdat Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

7.5CVSS3.5AI score0.03632EPSS
Exploits0References1
securityvulns
securityvulns
added 2013/05/27 12:0 a.m.82 views

APPLE-SA-2013-05-22-1 QuickTime 7.7.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-22-1 QuickTime 7.7.4 QuickTime 7.7.4 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Opening a maliciously crafted TeXML file may lead to an unexpected application...

9.3CVSS0.7AI score0.81301EPSS
Exploits12
NVD
NVD
added 2013/05/24 4:43 p.m.16 views

CVE-2013-1019

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

9.3CVSS7.6AI score0.03632EPSS
Exploits0References7
Prion
Prion
added 2013/05/24 4:43 p.m.19 views

Buffer overflow

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

9.3CVSS8.3AI score0.03632EPSS
Exploits0References7Affected Software2
Cvelist
Cvelist
added 2013/05/24 10:0 a.m.21 views

CVE-2013-1019

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

7.6AI score0.03632EPSS
Exploits0References7
CVE
CVE
added 2013/05/24 10:0 a.m.62 views

CVE-2013-1019

CVE-2013-1019 is a vulnerability in Apple QuickTime’s handling of Sorenson-encoded movie data. According to the ZDI advisory (ZDI-13-118), processing a malformed Sorenson Video 3 mdat section in a QuickTime movie can enable remote code execution on vulnerable QuickTime implementations, with user ...

9.3CVSS7.7AI score0.03632EPSS
Exploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2012/09/27 12:0 a.m.37 views

Apple TV < 5.1 Multiple Vulnerabilities

According to its banner, the remote Apple TV 2nd generation or later device has a version of iOS that is prior to 5.1. It is, therefore, reportedly affected by several vulnerabilities : - An uninitialized memory access issue in the handling of Sorenson encoded movie files could lead to arbitrary...

9.3CVSS8.9AI score0.43757EPSS
Exploits4References24
NVD
NVD
added 2012/09/20 9:55 p.m.20 views

CVE-2012-3722

The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

6.8CVSS7.4AI score0.02122EPSS
Exploits0References5
Prion
Prion
added 2012/09/20 9:55 p.m.20 views

Memory corruption

The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

6.8CVSS7.9AI score0.02122EPSS
Exploits0References5Affected Software3
Cvelist
Cvelist
added 2012/09/20 9:0 p.m.20 views

CVE-2012-3722

The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

7.4AI score0.02122EPSS
Exploits0References5
CVE
CVE
added 2012/09/20 9:0 p.m.64 views

CVE-2012-3722

CVE-2012-3722 concerns an uninitialized memory access in the Sorenson codec used by QuickTime on macOS (before 10.7.5) and CoreMedia on iOS (before 6). The flaw allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Sorenson-encoded movie file. References ind...

6.8CVSS7.5AI score0.02122EPSS
Exploits0References5Affected Software1
OpenVAS
OpenVAS
added 2012/05/18 12:0 a.m.72 views

Apple QuickTime Multiple Vulnerabilities - Windows

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

9.3CVSS5.1AI score0.69623EPSS
Exploits24References20
Tenable Nessus
Tenable Nessus
added 2012/05/18 12:0 a.m.23 views

QuickTime < 7.7.2 Multiple Vulnerabilities

Binary data 801194.prm...

9.3CVSS7.8AI score0.69623EPSS
Exploits24References18
NVD
NVD
added 2012/05/16 10:12 a.m.14 views

CVE-2012-0669

Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with Sorenson encoding...

9.3CVSS7.6AI score0.03341EPSS
Exploits1References5
Rows per page
Query Builder