CVE-2015-5779

Technical details about CVE-2015-5779 are not publicly provided in the connected documents. The initial description includes some details, but no concrete product/version/impact information is available here. Monitor for updates.

CVE-2005-2340

Apple QuickTime before 7.0.4 is affected by a heap/buffer overflow in image handling (QTIF, PICT, and JPEG) that enables remote code execution when a crafted image is opened. Several connected advisories confirm the vulnerability in QuickTime PictureViewer and related components, noting that the ...

CVE-2005-2743

CVE-2005-2743 affects Apple Mac OS X 10.3.9 and earlier where Java extensions for QuickTime (version 6.52 and earlier) allow untrusted applets to call arbitrary functions in system libraries, enabling remote code execution. The root cause is a flaw in the Java extensions integration with QuickTim...

CVE-2007-0588

Apple QuickDraw in Mac OS X

CVE-2005-4092

Summary of CVE-2005-4092 and related advisories: This issue is a heap-based overflow in Apple QuickTime/ iTunes involving QuickTime.qts, exploitable via crafted QuickTime movie files. The vulnerabilities concern the handling of the Movie Resource atom with a large size and the STSD (Sample Descri...

CVE-2005-3713

Apple QuickTime before 7.0.4 is affected by a heap-based buffer overflow triggered by a crafted GIF image containing a Netscape Navigator Application Extension Block. The overflow modifies the heap in the Picture Modifier block and can allow remote attackers to execute arbitrary code. Vendors doc...

CVE-2007-4672

Apple QuickTime before 7.3 contains a stack-based buffer overflow in processing PICT images due to an invalid UncompressedQuickTimeData opcode length, allowing remote code execution. Public sources (e.g., SAINT advisories and NVD entry) note the vulnerability exists and recommend upgrading to Qui...

CVE-2004-0921

CVE-2004-0921 affects AFP Server on Mac OS X 10.3.x–10.3.5. When a guest has an AFP volume mounted, they can terminate authenticated user mounts via modified SessionDestroy packets, enabling partial impact to confidentiality, integrity, and availability. Connected sources corroborate the affected...

CVE-2017-2218

The CVE-2017-2218 entry describes an untrusted search path vulnerability in the Installer of QuickTime for Windows (CWE-427). The underlying issue is DLL search path handling that can be exploited by placing a Trojan horse DLL in an unspecified directory, enabling arbitrary code execution with th...

CVE-2002-0252

CVE-2002-0252 affects Apple QuickTime Player 5.01 and 5.02. A buffer overflow is triggered by a remote web server sending a response with a long Content-Type MIME header, allowing arbitrary code execution. The vulnerability is tied to the Content-Type handling in the RTSP/HTTP response parsing. E...

CVE-2001-0198

The CVE-2001-0198 issue affects the QuickTime Player plugin 4.1.2 (Japanese). The root cause is a buffer overflow caused by a long HREF parameter in an EMBED tag, allowing remote attackers to execute arbitrary commands. Public references describe a remote buffer overflow exploit via a crafted HTM...

CVE-2003-0168

CVE-2003-0168 describes a buffer overflow in Apple QuickTime Player for Windows (versions 5.x and 6.0) triggered by processing overly long QuickTime URLs, allowing remote arbitrary code execution. The issue affects the Windows QuickTime Player, not the Mac versions. Vendor guidance: upgrade to Qu...

CVE-2007-2389

CVE-2007-2389 concerns Apple QuickTime for Java 7.1.6 on Mac OS X and Windows. The root cause is that QuickTime for Java does not clear memory before use, potentially allowing a remote attacker to read memory from a web browser via Java applets. Impact is memory disclosure from the browser contex...

CVE-2005-3711

Apple QuickTime

CVE-2008-0778

Multiple stack-based buffer overflows exist in the QTPlugin.ocx ActiveX control of Apple QuickTime 7.4.1 and earlier. The vulnerability affects the QTPlugin.ocx component and is triggered by long arguments to the SetBgColor, SetHREF, SetMovieName, SetTarget, and SetMatrix methods, allowing remote...

CVE-2006-2238

CVE-2006-2238 describes a heap-based buffer overflow in Apple QuickTime before 7.1 triggered by a crafted BMP file that overflows in the ReadBMP function, allowing remote code execution. The vulnerability affects QuickTime’s BMP handling across multiple products; exploitation details and affected...

CVE-2005-3708

CVE-2005-3708 describes an integer overflow in Apple QuickTime prior to 7.0.4, triggered by crafted TGA image files. The vulnerability allows remote code execution by exploiting the QuickTime image parsing path, as documented across multiple sources (NVD entry for CVE-2005-3708 and CERT advisorie...

CVE-2005-3707

Apple QuickTime before 7.0.4 contains a buffer overflow in the handling of TGA image files (CVE-2005-3707). A crafted TGA image could allow a remote attacker to execute arbitrary code on vulnerable systems running QuickTime, with the impact described as remote code execution. The issue is tied to...

CVE-2005-3710

Summary: CVE-2005-3710 is an Apple QuickTime TIFF handling vulnerability. A crafted TIFF image with modified ImageWidth triggers an integer overflow in QuickTime before version 7.0.4, which could allow remote code execution or a denial of service on affected systems (Mac OS X and Windows). Severa...

CVE-2005-3709

Apple QuickTime Player before 7.0.4 is affected by an integer underflow in the Color Map Entry Size when parsing TGA images, potentially allowing a remote attacker to cause a crash or execute arbitrary code. Fortinet/Apple advisories confirm the issue is triggered by specially crafted TGA files a...

CVE-2002-0376

Technical details about CVE-2002-0376 are not publicly provided in the supplied documents. Monitor for updates for affected products, vulnerable components and fixes; no concrete exploit vectors or mitigations are described here.