CVE-2008-3626

Apple QuickTime prior to 7.5.5 is affected by a memory-corruption vulnerability in CallComponentFunctionWithStorage when handling large entries in the STSZ atoms’ sample_size_table. A crafted movie file can allow remote attackers to execute arbitrary code or cause a denial of service. The issue a...

CVE-2007-6166

CVE-2007-6166 is a stack-based buffer overflow in Apple QuickTime

CVE-2009-2798

CVE-2009-2798 describes a heap-based buffer overflow in Apple QuickTime before 7.6.4 triggered by parsing a crafted FlashPix (.fpx) file. The flaw occurs during handling of sector-related fields, where multiplication of two 32-bit values leads to an undersized heap allocation, allowing a remote a...

CVE-2009-2203

The CVE-2009-2203 entry describes a buffer overflow in Apple QuickTime prior to 7.6.4 triggered by parsing MPEG-4 video files, which could allow remote code execution or cause a application crash/DoS. Apple released QuickTime 7.6.4 to address this issue (bounds checking improvements).

CVE-2009-0001

Apple QuickTime before 7.6 is vulnerable to a heap-based buffer overflow triggered by processing crafted RTSP URLs, potentially allowing remote code execution or application termination. Remediation: update to Apple QuickTime 7.6 or newer (per cited advisories).

CVE-2009-2202

Apple QuickTime vulnerability CVE-2009-2202 exists in QuickTime’s handling of H.264 movie files and can allow remote code execution or a denial of service via memory corruption. In the OpenVAS/Nessus entries, the affected product is QuickTime on Mac OS X (and QuickTime on Windows), with the root ...

CVE-2009-0952

CVE-2009-0952 refers to a buffer overflow in Apple QuickTime before 7.6.2 triggered by parsing a crafted PSD image, allowing remote code execution or a denial of service. Affected product: Apple QuickTime (Windows and Mac). Root cause: overflow in PSD image handling during header copy/size valida...

CVE-2009-2799

Apple QuickTime is affected by CVE-2009-2799 (heap-based buffer overflow) due to how H.264 movie files are processed. The vulnerability can allow remote code execution or a denial-of-service condition (crash) when a crafted H.264 file is opened. Affected product is QuickTime on macOS; remediation...

CVE-2009-0002

CVE-2009-0002 is a heap-based buffer overflow in Apple QuickTime prior to 7.6 triggered by processing THKD atoms in QTVR movie files. Remote attackers could cause a denial of service and, in some cases, arbitrary code execution. Affected: QuickTime on Mac OS X and Windows (versions older than 7.6...

CVE-2009-0951

CVE-2009-0951 is a heap-based overflow in Apple QuickTime

CVE-2009-0005

CVE-2009-0005 concerns Apple QuickTime before 7.6. The vulnerability is described as memory corruption triggered by a crafted H.263-encoded movie file, allowing remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code. Several OpenVAS/Nessus entr...

CVE-2010-1799

CVE-2010-1799 describes a stack-based buffer overflow in Apple QuickTime’s error-logging path on Windows, exploitable via a crafted SMIL/movie file to execute arbitrary code or cause a denial of service. Affected product/version: Apple QuickTime before 7.6.7 (Windows). Root cause: boundary/stack ...

CVE-2009-0955

CVE-2009-0955 affects Apple QuickTime prior to 7.6.2 due to a sign-extension vulnerability in the Image Description Atom handling for Apple Video files. A remote attacker could entice a user to open a crafted QuickTime movie, triggering a memory corruption flaw that may lead to arbitrary code exe...

CVE-2009-0957

CVE-2009-0957 describes a heap-based buffer overflow in Apple QuickTime prior to 7.6.2, triggered during parsing of JP2 images. The flaw can allow remote attackers to execute arbitrary code or cause an application crash, potentially leading to denial of service. Affected product: Apple QuickTime

CVE-2007-2402

CVE-2007-2402 affects QuickTime for Java in Apple QuickTime prior to 7.2. The vulnerability is a failure to perform sufficient access control, enabling remote attackers to obtain sensitive information (screen content) via crafted Java applets. The primary sources describe the issue as a design/lo...

CVE-2009-0185

Apple QuickTime before 7.6.2 is affected by a heap-based buffer overflow in processing MS ADPCM encoded audio data within AVI files, enabling potential remote code execution or crash (DoS). Public docs list CVE-2009-0185 among a set of related QuickTime vulnerabilities; remediation is to update t...

CVE-2007-2394

Apple QuickTime (Mac OS X) before 7.2 on 10.3.9/10.4.9 is affected by an integer overflow in SMIL parsing, specifically in title/author fields, due to improper memory allocation calculations. This can allow user‑assisted remote code execution when a user opens a crafted SMIL file or visits a craf...

CVE-2009-0954

Apple QuickTime for Windows is affected by CVE-2009-0954 due to a heap-based buffer overflow when parsing Clipping Region (CRGN) atoms in QuickTime movie files. The issue allows remote code execution or denial of service via a crafted movie file, with the root cause being improper bounds checks d...

CVE-2009-0003

Apple QuickTime prior to 7.6 contains a heap-based buffer overflow in processing AVI headers, specifically when the nBlockAlign value in the _WAVEFORMATEX structure is malformed. Consequences cited include possible DoS (application termination) and arbitrary code execution. CVE-2009-0003 is corro...

CVE-2009-0004

Apple QuickTime prior to 7.6 is affected by multiple CVEs including CVE-2009-0004, where a buffer overflow in QuickTime’s handling of MPEG-2/MP3 content can cause application termination or arbitrary code execution. The OpenVAS/Nessus entries reference Windows and Mac OS X variants of QuickTime

CVE-2007-2396

CVE-2007-2396 concerns the JDirect support in QuickTime for Java within Apple QuickTime prior to version 7.2. The vulnerability arises because JDirect exposes dangerous interfaces that can be abused by remote attackers via crafted Java applets to achieve arbitrary code execution. Some sources exp...

CVE-2009-0953

CVE-2009-0953 affects Apple QuickTime prior to 7.6.2, where handling of PICT images can cause a heap-based buffer overflow, enabling remote code execution or a denial of service. Affected products are QuickTime on Windows and Mac OS X as part of the QuickTime suite. The vulnerability stems from p...

CVE-2009-0188

CVE-2009-0188 concerns Apple QuickTime before 7.6.2, where a crafted Sorenson 3 video file can cause memory corruption, leading to arbitrary code execution or an application crash. The vulnerability is part of a set of QuickTime parsing flaws (including how it handles Sorenson Video 3 content and...

CVE-2009-0956

Apple QuickTime before 7.6.2 contains an uninitialized memory access in handling movie files, allowing remote code execution or a crash via a movie containing a user data atom of size zero. The CVE-2009-0956 entry is part of a set of related QuickTime vulnerabilities; remediation is to apply the ...

CVE-2008-1739

Apple QuickTime before 7.4.5 is affected by CVE-2008-1739. The flaw allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, triggering memory corruption. Affected component: QuickTime parsing of ftyp atoms in MP4/MOV...

CVE-2007-2397

CVE-2007-2397 affects QuickTime for Java in Apple QuickTime prior to 7.2. The vulnerability arises because QuickTime for Java does not properly enforce permissions, allowing remote attackers to disable security controls and execute arbitrary code via crafted Java applets. Connected sources confir...

CVE-2007-2392

CVE-2007-2392 : Apple QuickTime before 7.2 on Mac OS X 10.3.9/10.4.9 is affected by a memory corruption vulnerability triggered by a crafted movie file, allowing user‑assisted remote code execution. The issue is documented across multiple sources (NVD entry and CERT notes). Affected product is Qu...

CVE-2007-2393

CVE-2007-2393 affects Apple QuickTime, specifically the QuickTime for Java component, prior to version 7.2. The vulnerability arises from a design flaw in the Java handling that allows remote attackers to bypass security controls and write to process memory via Java applets, potentially enabling ...