Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
AppleQuicktime-

28 matches found

CVE
CVE•added 2007/11/29 1:46 a.m.•54 views

CVE-2007-6166

Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.

9.3CVSS7.6AI score0.83919EPSS
CVE
CVE•added 2009/09/10 9:30 p.m.•52 views

CVE-2009-2798

Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file.

9.3CVSS7.7AI score0.07937EPSS
CVE
CVE•added 2009/01/21 8:30 p.m.•51 views

CVE-2009-0005

Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted H.263 encoded movie file that triggers memory corruption.

9.3CVSS7.6AI score0.04024EPSS
CVE
CVE•added 2008/09/11 1:13 a.m.•50 views

CVE-2008-3626

The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted m...

6.8CVSS7.5AI score0.04008EPSS
CVE
CVE•added 2009/06/02 6:30 p.m.•50 views

CVE-2009-0951

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC compression file.

9.3CVSS7.9AI score0.21519EPSS
CVE
CVE•added 2009/09/10 9:30 p.m.•50 views

CVE-2009-2203

Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG-4 video file.

9.3CVSS7.7AI score0.07937EPSS
CVE
CVE•added 2010/08/16 6:39 p.m.•50 views

CVE-2010-1799

Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

9.3CVSS8AI score0.67678EPSS
CVE
CVE•added 2009/09/10 9:30 p.m.•49 views

CVE-2009-2799

Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264 movie file.

9.3CVSS7.7AI score0.07937EPSS
CVE
CVE•added 2009/01/21 8:30 p.m.•48 views

CVE-2009-0001

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL.

9.3CVSS9.2AI score0.06199EPSS
CVE
CVE•added 2009/01/21 8:30 p.m.•47 views

CVE-2009-0002

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms.

9.3CVSS7.9AI score0.40449EPSS
CVE
CVE•added 2009/06/02 6:30 p.m.•47 views

CVE-2009-0952

Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted compressed PSD image.

9.3CVSS7.8AI score0.06275EPSS
CVE
CVE•added 2009/06/02 6:30 p.m.•47 views

CVE-2009-0955

Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a "sign extension issue."

9.3CVSS7.7AI score0.284EPSS
CVE
CVE•added 2007/07/15 9:30 p.m.•46 views

CVE-2007-2402

QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.

4.3CVSS5.5AI score0.01093EPSS
CVE
CVE•added 2009/06/02 6:30 p.m.•45 views

CVE-2009-0957

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 image.

9.3CVSS8AI score0.27783EPSS
CVE
CVE•added 2009/09/10 9:30 p.m.•45 views

CVE-2009-2202

Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted H.264 movie file.

9.3CVSS7.8AI score0.10923EPSS
CVE
CVE•added 2009/06/02 6:30 p.m.•44 views

CVE-2009-0954

Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie file containing crafted Clipping Region (CRGN) atom types.

9.3CVSS8AI score0.27783EPSS
CVE
CVE•added 2009/06/02 6:30 p.m.•44 views

CVE-2009-0956

Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero.

9.3CVSS7.7AI score0.0888EPSS
CVE
CVE•added 2009/06/02 6:30 p.m.•43 views

CVE-2009-0185

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted MS ADPCM encoded audio data in an AVI movie file.

9.3CVSS8AI score0.28197EPSS
CVE
CVE•added 2009/01/21 8:30 p.m.•42 views

CVE-2009-0003

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value in the _WAVEFORMATEX structure.

9.3CVSS7.9AI score0.31805EPSS
CVE
CVE•added 2009/01/21 8:30 p.m.•42 views

CVE-2009-0004

Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted MP3 audio file.

9.3CVSS7.8AI score0.06593EPSS
CVE
CVE•added 2007/07/15 9:30 p.m.•41 views

CVE-2007-2394

Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.

9.3CVSS7.5AI score0.48805EPSS
CVE
CVE•added 2008/09/03 7:42 p.m.•41 views

CVE-2008-1739

Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption.

6.8CVSS7.5AI score0.01258EPSS
CVE
CVE•added 2009/06/02 6:30 p.m.•41 views

CVE-2009-0953

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.

9.3CVSS8AI score0.21519EPSS
CVE
CVE•added 2007/07/15 9:30 p.m.•40 views

CVE-2007-2397

QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets.

9.3CVSS7.3AI score0.38251EPSS
CVE
CVE•added 2009/06/02 6:30 p.m.•39 views

CVE-2009-0188

Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie composed of a Sorenson 3 video file.

9.3CVSS7.8AI score0.09031EPSS
CVE
CVE•added 2007/07/15 9:30 p.m.•38 views

CVE-2007-2392

Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via a crafted movie file that triggers memory corruption.

9.3CVSS7.2AI score0.10438EPSS
CVE
CVE•added 2007/07/15 9:30 p.m.•37 views

CVE-2007-2393

The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.

9.3CVSS7.3AI score0.11782EPSS
CVE
CVE•added 2007/07/15 9:30 p.m.•37 views

CVE-2007-2396

The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.

9.3CVSS7.3AI score0.29102EPSS