CVE-2015-3667

CVE-2015-3667 affects Apple QuickTime's QT Media Foundation (before 7.7.7) used in OS X pre-10.10.4. The vulnerability is a memory corruption flaw in processing MP4/box structures (notably the stbl box) that can be triggered by a crafted file, potentially allowing remote code execution or a denia...

CVE-2015-7085

Technical details for CVE-2015-7085 are not publicly available in the provided documents. No specifics on affected products, root cause, or remediation are listed. Monitor for updates.

CVE-2005-2340

Apple QuickTime before 7.0.4 is affected by a heap/buffer overflow in image handling (QTIF, PICT, and JPEG) that enables remote code execution when a crafted image is opened. Several connected advisories confirm the vulnerability in QuickTime PictureViewer and related components, noting that the ...

CVE-2010-3791

CVE-2010-3791 affects Apple QuickTime on Mac OS X 10.6.x prior to 10.6.5. It is a buffer overflow in QuickTime’s handling of MPEG-encoded movie files, which could allow a remote attacker to cause an application crash or execute arbitrary code. The documented remediation is to apply Mac OS X 10.6....

CVE-2013-1019

CVE-2013-1019 is a vulnerability in Apple QuickTime’s handling of Sorenson-encoded movie data. According to the ZDI advisory (ZDI-13-118), processing a malformed Sorenson Video 3 mdat section in a QuickTime movie can enable remote code execution on vulnerable QuickTime implementations, with user ...

CVE-2005-2753

CVE-2005-2753 affects Apple QuickTime prior to 7.0.3. An integer overflow in parsing MOV files causes a sign-extension error in a Pascal-style string, enabling user-assisted or remote code execution when a crafted MOV is opened. Impact is remote code execution with the attacker’s code running wit...

CVE-2010-3790

CVE-2010-3790 affects Apple QuickTime on Mac OS X, where a crafted QuickTime movie file can trigger a memory corruption/buffer overrun during parsing of a matrix structure in a PICT/RIFF context, allowing remote code execution or a crash. The flaw can be exploited by simply opening or viewing a m...

CVE-2012-0669

Apple QuickTime on Windows (CVE-2012-0669) has a remote code execution vulnerability in parsing Sorenson SVQ3 streams. The flaw can cause arbitrary code execution via a crafted movie file; exploit requires user interaction (e.g., opening a malicious file or visiting a malicious page). The issue i...

CVE-2015-5785

Apple QuickTime

CVE-2015-7088

CVE-2015-7088 concerns Apple QuickTime before 7.7.9, where a crafted movie file can cause remote code execution or memory corruption leading to a denial of service. The description notes this is a separate vulnerability from CVE-2015-7085/7086/7087/7089/7090/7091/7092/7117. Exploitation details o...

CVE-2005-4092

Summary of CVE-2005-4092 and related advisories: This issue is a heap-based overflow in Apple QuickTime/ iTunes involving QuickTime.qts, exploitable via crafted QuickTime movie files. The vulnerabilities concern the handling of the Movie Resource atom with a large size and the STSD (Sample Descri...

CVE-2006-1460

Apple QuickTime before 7.1 is affected by CVE-2006-1460 due to a heap buffer overflow in the udta Atom of MOV files. A crafted MOV containing an oversized udta Atom can trigger memory overwrite, leading to remote code execution under the user’s context. Affected products include QuickTime for Win...

CVE-2007-0718

CVE-2007-0718 describes a heap-based buffer overflow in Apple QuickTime prior to 7.1.5 when processing QTIF files. If a Video Sample Description contains a Color table ID of 0, QuickTime expects a color table post-description and performs a memory swap on memory that may not be part of the heap b...

CVE-2009-2203

The CVE-2009-2203 entry describes a buffer overflow in Apple QuickTime prior to 7.6.4 triggered by parsing MPEG-4 video files, which could allow remote code execution or cause a application crash/DoS. Apple released QuickTime 7.6.4 to address this issue (bounds checking improvements).

CVE-2009-2798

CVE-2009-2798 describes a heap-based buffer overflow in Apple QuickTime before 7.6.4 triggered by parsing a crafted FlashPix (.fpx) file. The flaw occurs during handling of sector-related fields, where multiplication of two 32-bit values leads to an undersized heap allocation, allowing a remote a...

CVE-2012-0666

The CVE-2012-0666 entry is confirmed to have concrete technical details in connected documents: Apple QuickTime on Windows contains a stack-based buffer overflow in the QuickTime plugin (QTPluginControl::SetLanguage) triggered via crafted QTMovie objects, enabling remote code execution or a crash...

CVE-2005-2743

CVE-2005-2743 affects Apple Mac OS X 10.3.9 and earlier where Java extensions for QuickTime (version 6.52 and earlier) allow untrusted applets to call arbitrary functions in system libraries, enabling remote code execution. The root cause is a flaw in the Java extensions integration with QuickTim...

CVE-2011-0246

CVE-2011-0246 refers to a heap-based buffer overflow in Apple QuickTime on Windows prior to version 7.7, triggered by processing a crafted GIF file. The vulnerability can allow remote code execution or cause an application crash (DoS). The NVD entry confirms the GIF-based overflow as the vector, ...

CVE-2007-0015

A stack buffer overflow exists in Apple QuickTime (version 7.1.3) due to a lack of boundary checks when processing rtsp:// URLs with long path components. A remote, unauthenticated attacker can leverage this by providing a specially crafted string via HTML , JavaScript , or a QTL file to execute ...

CVE-2007-5045

CVE-2007-5045 describes an argument injection in Apple QuickTime 7.1.5 and earlier when used with Mozilla Firefox

CVE-2008-0234

CVE-2008-0234 concerns a buffer overflow in Apple QuickTime Player (notably 7.3.1.70 and older than 7.4.1) when RTSP tunneling is enabled. A long Reason-Phrase in an RTSP response (e.g., via a crafted 404 message) can allow a remote attacker to execute arbitrary code on affected systems (Mac OS X...

CVE-2010-3800

CVE-2010-3800 affects Apple QuickTime prior to 7.6.9, where a memory corruption in handling PICT files can lead to arbitrary code execution or a crash. The issue arises from inadequate validation during PICT processing, enabling remote exploitation. Apple released patches addressing this in Quick...

CVE-2013-1022

CVE-2013-1022 is a buffer overflow in Apple QuickTime before 7.7.4 triggered by crafted mvhd atoms in movie files, potentially allowing arbitrary code execution or a crash. Affected products linked in public advisories include QuickTime on Windows; Apple-SA-2013-05-22-1 describes QuickTime 7.7.4 ...

CVE-2007-0588

Apple QuickDraw in Mac OS X

CVE-2009-0951

CVE-2009-0951 is a heap-based overflow in Apple QuickTime

CVE-2010-0529

Apple QuickTime (Windows) is affected by a heap-based buffer overflow in QuickTime.qts when parsing a PICT image using the BkPixPat opcode (0x12). The flaw exists in Apple QuickTime before version 7.6.6, and can allow remote code execution or a denial of service via crafted images. Exploitation r...

CVE-2014-1244

Apple QuickTime contains a buffer overflow in the H.264 handling path that can allow remote code execution or denial of service when processing a crafted movie file, affecting QuickTime versions prior to 7.7.5 (Windows). The issue is one of multiple vulnerabilities described for QuickTime fixed i...

CVE-2015-3663

CVE-2015-3663 affects Apple QuickTime’s QT Media Foundation and is exploitable via a crafted file that can trigger memory corruption, potentially allowing remote code execution or a denial of service. Affected: QuickTime before 7.7.7 (on OS X prior to 10.10.4 and other products). Root cause is me...

CVE-2015-3669

CVE-2015-3669 refers to a vulnerability in QT Media Foundation within Apple QuickTime prior to version 7.7.7. According to the provided documents, a crafted file can cause remote code execution or a denial of service via memory corruption. The affected product is Apple QuickTime (QT Media Foundat...

CVE-2004-0921

CVE-2004-0921 affects AFP Server on Mac OS X 10.3.x–10.3.5. When a guest has an AFP volume mounted, they can terminate authenticated user mounts via modified SessionDestroy packets, enabling partial impact to confidentiality, integrity, and availability. Connected sources corroborate the affected...

CVE-2005-2754

CVE-2005-2754 refers to an integer overflow in Apple QuickTime before 7.0.3 that can enable remote code execution when a crafted MOV file with “Improper movie attributes” is loaded. The issue is documented across multiple sources as affecting QuickTime on Mac OS X and Windows, with the overflow p...

CVE-2007-2388

CVE-2007-2388 affects Apple QuickTime for Java 7.1.6 on Mac OS X and Windows. The vulnerability arises from improper restriction of QTObject subclassing, allowing a remote attacker to execute arbitrary code via a web page that uses a user-defined class accessing unsafe functions to write to arbit...

CVE-2011-0250

CVE-2011-0250 is a vulnerability in Apple QuickTime where a heap-based buffer overflow occurs in the STSS atom handling of QuickTime movie files, allowing remote code execution or application crash. The ZDI advisory confirms the flaw can be exploited via remote interaction (the target visits a ma...

CVE-2012-0265

CVE-2012-0265 is a stack-based buffer overflow in Apple QuickTime prior to 7.7.2 on Windows, exploitable via a crafted file pathname to execute arbitrary code or cause a crash. Public references confirm multiple CVEs around QuickTime 7.7.2 vulnerabilities and list CVE-2012-0265 among them. The Op...

CVE-2012-3755

Apple QuickTime contains a buffer overflow in the handling of Targa image files, affecting versions before 7.7.3. Successful exploitation can lead to arbitrary code execution or application crash. Remediation: upgrade to QuickTime 7.7.3 as per Apple advisory APPLE-SA-2012-11-07-1.

CVE-2012-3757

CVE-2012-3757 affects Apple QuickTime before 7.7.3. The root cause is memory corruption in the handling of PICT files, allowing remote code execution or a denial of service when a crafted PICT file is opened. Exploitation requires a user to open a malicious file; impact could be full user rights ...

CVE-2008-1581

Apple QuickTime for Windows prior to 7.5 is affected by a heap-based buffer overflow in the PixData structure used when processing PICT images, allowing remote attackers to crash the player and potentially execute arbitrary code via crafted PICT content. Multiple sources corroborate a set of rela...

CVE-2008-3614

Apple QuickTime for Windows before 7.5.5 is vulnerable to an integer overflow in PICT parsing, causing heap corruption that can enable remote code execution or an application crash when presented with a crafted PICT image. Affected product: QuickTime on Windows; root cause: heap corruption from P...

CVE-2008-3624

CVE-2008-3624 describes a heap-based buffer overflow in Apple QuickTime before 7.5.5 triggered by crafted QTVR panorama atoms in QuickTime movie files. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (application crash). Affected product is QuickTi...

CVE-2009-0007

Summary (CVE-2009-0007) : Apple QuickTime contains a heap-based buffer/memory corruption in the handling of JPEG atoms embedded in STSD atoms within QuickTime movie files. The flaw occurs due to lack of boundary checks when processing these JPEG atoms, allowing a remote attacker to cause a crash ...

CVE-2010-3801

CVE-2010-3801 affects Apple QuickTime prior to 7.6.9. A crafted FlashPix file can cause memory corruption leading to remote code execution or a denial of service. The issue is addressed by QuickTime/Apple security updates; Apple cites QuickTime 7.6.9 as the fix for Mac OS X (and related Security ...

CVE-2011-0209

CVE-2011-0209 : An integer overflow in QuickTime’s handling of RIFF WAV files on Mac OS X before 10.6.8 can be exploited remotely to achieve arbitrary code execution or cause a denial of service (application crash) via a crafted WAV file. The issue is documented in the Apple advisory and is addre...

CVE-2011-0252

CVE-2011-0252 is a QuickTime vulnerability where a heap-based buffer overflow can be triggered by crafted STTS atoms in QuickTime movie files, allowing remote code execution. The issue arises from handling of invalid Time-To-Sample values, which can overflow a heap counter and compromise the proc...

CVE-2014-1251

Apple QuickTime (Windows) before 7.7.5 is affected by a buffer overflow in the parsing of the clef atom within movie files. The underlying issue is a malformed clef atom that can overflow an allocated buffer, enabling either remote code execution or application crash when a user opens a crafted f...

CVE-2015-5786

Apple QuickTime before 7.7.8 is affected by CVE-2015-5786, where a crafted file can cause memory corruption, enabling remote code execution or a denial of service (application crash). This entry references multiple related CVEs (e.g., CVE-2015-5785) and confirms the vulnerability class as memory ...

CVE-2005-3713

Apple QuickTime before 7.0.4 is affected by a heap-based buffer overflow triggered by a crafted GIF image containing a Netscape Navigator Application Extension Block. The overflow modifies the heap in the Picture Modifier block and can allow remote attackers to execute arbitrary code. Vendors doc...

CVE-2006-1453

CVE-2006-1453 affects Apple QuickTime before 7.1. It is a stack-based/buffer overflow in QuickDraw PICT image format support that lets remote attackers execute arbitrary code via a crafted image containing malformed font information. The connected documents specify that QuickTime 7.1 (Mac/Windows...

CVE-2009-0001

Apple QuickTime before 7.6 is vulnerable to a heap-based buffer overflow triggered by processing crafted RTSP URLs, potentially allowing remote code execution or application termination. Remediation: update to Apple QuickTime 7.6 or newer (per cited advisories).

CVE-2014-1248

CVE-2014-1248 affects Apple QuickTime prior to 7.7.5. A buffer overflow in the handling of the ldat atom in movie files can allow remote code execution or cause an application crash (DoS). Mitigation: apply QuickTime 7.7.5 or later updates where this issue was addressed. Exploitation details are ...

CVE-2015-7086

Technical details for CVE-2015-7086 are not publicly provided in the connected documents. The initial description mentions QuickTime before 7.7.9 vulnerable to remote code execution via crafted movie files. No additional vendor/version specifics are available here; monitor for updates.