Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
AppleQuicktime

35 matches found

CVE
CVE•added 2008/01/11 2:46 a.m.•55 views

CVE-2008-0234

Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message.

9.3CVSS7.5AI score0.4414EPSS
CVE
CVE•added 2008/09/11 1:13 a.m.•54 views

CVE-2008-3628

Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, related to an "invalid pointer issue."

9.3CVSS7.5AI score0.04937EPSS
CVE
CVE•added 2008/09/11 1:13 a.m.•53 views

CVE-2008-3614

Integer overflow in Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, which triggers heap corruption.

6.8CVSS7.1AI score0.25812EPSS
CVE
CVE•added 2008/06/10 6:32 p.m.•50 views

CVE-2008-1583

Heap-based buffer overflow in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PICT image, a different vulnerability than CVE-2008-1581.

6.8CVSS7.7AI score0.1479EPSS
CVE
CVE•added 2008/09/11 1:13 a.m.•50 views

CVE-2008-3626

The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted m...

6.8CVSS7.5AI score0.04008EPSS
CVE
CVE•added 2008/09/11 1:13 a.m.•49 views

CVE-2008-3624

Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted panorama atoms.

6.8CVSS7.9AI score0.02811EPSS
CVE
CVE•added 2008/02/14 12:0 p.m.•47 views

CVE-2008-0778

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the (1) SetBgColor, (2) SetHREF, (3) SetMovieName, (4) SetTarget, a...

7.5CVSS7.7AI score0.09685EPSS
CVE
CVE•added 2008/04/04 5:44 p.m.•45 views

CVE-2008-1016

Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbitrary code via a crafted movie that triggers memory corruption.

6.8CVSS7.2AI score0.01422EPSS
CVE
CVE•added 2008/04/04 5:44 p.m.•45 views

CVE-2008-1018

Heap-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via an MP4A movie with a malformed Channel Compositor (aka chan) atom.

6.8CVSS7.6AI score0.40576EPSS
CVE
CVE•added 2008/06/10 6:32 p.m.•44 views

CVE-2008-1581

Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted packed scanlines in PixData structures in a PICT image.

6.8CVSS7.8AI score0.1479EPSS
CVE
CVE•added 2008/04/04 5:44 p.m.•42 views

CVE-2008-1013

Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet.

6.8CVSS7.3AI score0.02896EPSS
CVE
CVE•added 2008/09/18 3:4 p.m.•42 views

CVE-2008-4116

Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long type attribute in a quicktime tag (1) on a web page or embedded in a (2) .mp4 or (3) .mov file, possibly related to the Check_st...

9.3CVSS8.2AI score0.0968EPSS
CVE
CVE•added 2008/06/10 6:32 p.m.•41 views

CVE-2008-1582

Unspecified vulnerability in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AAC-encoded file that triggers memory corruption.

6.8CVSS7.4AI score0.11113EPSS
CVE
CVE•added 2008/09/03 7:42 p.m.•41 views

CVE-2008-1739

Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption.

6.8CVSS7.5AI score0.01258EPSS
CVE
CVE•added 2008/09/11 1:13 a.m.•41 views

CVE-2008-3627

Apple QuickTime before 7.5.5 does not properly handle (1) MDAT atoms in MP4 video files within QuickTimeH264.qtx, (2) MDAT atoms in mov video files within QuickTimeH264.scalar, and (3) AVC1 atoms in an unknown media type within an unspecified component, which allows remote attackers to execute arbi...

9.3CVSS7.6AI score0.17902EPSS
CVE
CVE•added 2008/12/10 6:44 a.m.•40 views

CVE-2008-5406

Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."

9.3CVSS7.8AI score0.06123EPSS
CVE
CVE•added 2008/04/04 5:44 p.m.•39 views

CVE-2008-1017

Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.

6.8CVSS7.5AI score0.26209EPSS
CVE
CVE•added 2008/04/04 5:44 p.m.•39 views

CVE-2008-1021

Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding.

6.8CVSS7.6AI score0.20491EPSS
CVE
CVE•added 2008/09/11 1:13 a.m.•39 views

CVE-2008-3615

ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

9.3CVSS7.5AI score0.03565EPSS
CVE
CVE•added 2008/09/11 1:13 a.m.•39 views

CVE-2008-3635

Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 (aka IV32) codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafte...

9.3CVSS7.9AI score0.04267EPSS
CVE
CVE•added 2008/06/10 6:32 p.m.•38 views

CVE-2008-1584

Stack-based buffer overflow in Indeo.qtx in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted Indeo video codec content in a movie file.

6.8CVSS7.7AI score0.19936EPSS
CVE
CVE•added 2008/01/16 3:0 a.m.•37 views

CVE-2008-0032

Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption.

5.8CVSS7.2AI score0.06166EPSS
CVE
CVE•added 2008/04/04 5:44 p.m.•37 views

CVE-2008-1014

Apple QuickTime before 7.4.5 does not properly handle external URLs in movies, which allows remote attackers to obtain sensitive information.

4.3CVSS5.8AI score0.00615EPSS
CVE
CVE•added 2008/04/04 5:44 p.m.•37 views

CVE-2008-1023

Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file.

6.8CVSS7.6AI score0.04552EPSS
CVE
CVE•added 2008/06/10 6:32 p.m.•37 views

CVE-2008-1585

Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in video files, which sends these URIs to explorer.exe and thereby allows remote attackers to execute arbitrary programs, as originally demonstrated by crafted file: ...

6.8CVSS6.9AI score0.09415EPSS
CVE
CVE•added 2008/09/11 1:13 a.m.•37 views

CVE-2008-3625

Stack-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted (1) maxTilt, (2) minFieldOfView, and (3) maxFieldOfView elements in panorama ...

9.3CVSS7.8AI score0.21148EPSS
CVE
CVE•added 2008/09/11 1:13 a.m.•37 views

CVE-2008-3629

Apple QuickTime before 7.5.5 allows remote attackers to cause a denial of service (application crash) via a crafted PICT image that triggers an out-of-bounds read.

4.3CVSS6AI score0.01369EPSS
CVE
CVE•added 2008/01/16 3:0 a.m.•35 views

CVE-2008-0033

Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file with Image Descriptor (IDSC) atoms containing an invalid atom size, which triggers memory corruption.

9.3CVSS7.3AI score0.33607EPSS
CVE
CVE•added 2008/04/04 5:44 p.m.•35 views

CVE-2008-1019

Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted PICT image file, related to an improperly terminated memory copy loop.

6.8CVSS7.5AI score0.43865EPSS
CVE
CVE•added 2008/04/04 5:44 p.m.•35 views

CVE-2008-1020

Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak encoding, related to error checking and error messages.

6.8CVSS7.6AI score0.43865EPSS
CVE
CVE•added 2008/04/04 5:44 p.m.•34 views

CVE-2008-1015

Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.

6.8CVSS7.4AI score0.09447EPSS
CVE
CVE•added 2008/04/04 5:44 p.m.•34 views

CVE-2008-1022

Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted VR movie with an obji atom of zero size.

6.8CVSS7.5AI score0.43865EPSS
CVE
CVE•added 2008/04/30 12:10 a.m.•34 views

CVE-2008-2010

Unspecified vulnerability in Apple QuickTime Player on Windows XP SP2 and Vista SP1 allows remote attackers to execute arbitrary code via a crafted QuickTime media file. NOTE: as of 20080429, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a w...

9.3CVSS7.3AI score0.02083EPSS
CVE
CVE•added 2008/01/16 3:0 a.m.•32 views

CVE-2008-0036

Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding.

6.8CVSS7.5AI score0.14708EPSS
CVE
CVE•added 2008/01/16 2:0 a.m.•28 views

CVE-2008-0031

Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Sorenson 3 video file, which triggers memory corruption.

5.8CVSS7.4AI score0.02761EPSS