CVE-2011-3250

CVE-2011-3250 describes an integer overflow in Apple QuickTime prior to version 7.7.1 that can be triggered by a crafted JPEG2000-encoded movie file , allowing remote code execution or a denial of service (application crash). The description indicates the vulnerability lies in QuickTime’s handlin...

CVE-2011-0257

CVE-2011-0257 affects Apple QuickTime prior to 7.7. It stems from an integer signedness error in processing PICT PnSize, triggering a stack-based buffer overflow via a crafted PnSize opcode in a PICT file. Consequences documented: remote code execution or a denial of service (application crash). ...

CVE-2011-3249

CVE-2011-3249 involves a buffer overflow in Apple QuickTime prior to version 7.7.1 . A crafted movie file using the FLC encoding can be used by a remote attacker to trigger arbitrary code execution or cause a denial of service (application crash). The vulnerability is reported as highly impactful...

CVE-2011-0187

CVE-2011-0187 affects Mac OS X via the CoreMedia/QuickTime path: a cross-origin redirect in CoreMedia could bypass Same Origin Policy and allow access to potentially sensitive video data. The public details in connected docs indicate this is tied to OS X Lion/QuickTime/CoreMedia components, with ...

CVE-2011-0246

CVE-2011-0246 refers to a heap-based buffer overflow in Apple QuickTime on Windows prior to version 7.7, triggered by processing a crafted GIF file. The vulnerability can allow remote code execution or cause an application crash (DoS). The NVD entry confirms the GIF-based overflow as the vector, ...

CVE-2011-0251

CVE-2011-0251 is an Apple QuickTime STSZ atom parsing vulnerability that causes a heap-based buffer overflow, enabling remote code execution or a crash when processing crafted QuickTime Movie files. The flaw exists in QuickTime prior to 7.7 and stems from handling of STSZ atoms, per ZDI advisorie...

CVE-2011-0258

CVE-2011-0258 affects Apple QuickTime on Windows. The vulnerability arises in the handling of the mp4v atom within movie files, where an improper allocation/size checking leads to memory corruption and potential remote code execution. Exploitation would require user interaction (e.g., opening a c...

CVE-2011-0256

Apple QuickTime contains an integer overflow in the handling of the TRUN atom (sampleCount) that can be triggered by crafted track run atoms in QuickTime movie files, impacting QuickTime before version 7.7. Exploitation could allow remote code execution or a denial of service (application crash) ...

CVE-2011-0186

CVE-2011-0186 affects Apple QuickTime on Mac OS X, where memory corruption in JPEG2000 handling could allow remote arbitrary code execution or a crash. The issue is tied to QuickTime’s JPEG2000 processing and is listed with a base score of 4.3 (Medium). Public docs indicate that Apple addressed r...

CVE-2011-0209

CVE-2011-0209 : An integer overflow in QuickTime’s handling of RIFF WAV files on Mac OS X before 10.6.8 can be exploited remotely to achieve arbitrary code execution or cause a denial of service (application crash) via a crafted WAV file. The issue is documented in the Apple advisory and is addre...

CVE-2011-0250

CVE-2011-0250 is a vulnerability in Apple QuickTime where a heap-based buffer overflow occurs in the STSS atom handling of QuickTime movie files, allowing remote code execution or application crash. The ZDI advisory confirms the flaw can be exploited via remote interaction (the target visits a ma...

CVE-2011-0252

CVE-2011-0252 is a QuickTime vulnerability where a heap-based buffer overflow can be triggered by crafted STTS atoms in QuickTime movie files, allowing remote code execution. The issue arises from handling of invalid Time-To-Sample values, which can overflow a heap counter and compromise the proc...

CVE-2011-0211

CVE-2011-0211: Integer overflow in QuickTime’s handling of audio channels in QuickTime movie files on Mac OS X before 10.6.8. This can allow remote code execution or an application crash via a crafted movie file. Affected: Mac OS X versions prior to 10.6.8. Mitigation: update to Mac OS X 10.6.8 o...

CVE-2011-0248

CVE-2011-0248 : Stack-based buffer overflow in the QuickTime ActiveX control of Apple QuickTime on Windows (pre-7.7) when using Internet Explorer, exploitable via a crafted QTL file to execute arbitrary code or cause a crash. The connected Red Hat (RH:CVE-2011-0248) and ZDI advisories describe th...

CVE-2011-0249

Apple QuickTime (before 7.7) is affected by a heap-based buffer overflow in the STSC atom handling in QuickTime movie files, allowing remote code execution or a denial of service. The CVE-2011-0249 flaw is triggered when a crafted STSC atom causes memory corruption during parsing, as documented b...

CVE-2011-3251

Apple QuickTime for Windows (pre-7.7.1) is affected by a vulnerability in processing the TKHD atom of QuickTime movie files, which can lead to memory corruption and arbitrary code execution or a denial of service. The issue stems from how matrix structures in the mp4/tkhd handling are parsed, all...

CVE-2011-3248

CVE-2011-3248 affects Apple QuickTime (pre-7.7.1). A signedness error in the handling of font tables embedded in QuickTime movie files can be exploited by a crafted file to cause a remote code execution or application crash. The vulnerability is documented in ZDI-12-005 and tracked publicly with ...

CVE-2011-0213

Apple QuickTime contains multiple CVEs including CVE-2011-0213. The issue is a buffer overflow in QuickTime’s JPEG handling that can cause application termination or arbitrary code execution when processing a crafted JPEG, with impact on Mac OS X and Windows. For Mac OS X, Apple states the issue ...

CVE-2011-0210

CVE-2011-0210 affects QuickTime in Mac OS X prior to 10.6.8. The issue is an integer overflow in QuickTime’s handling of audio channels in movie files, which may lead to arbitrary code execution or a crash. The vulnerability is mitigated for Mac OS X by the 10.6.8 update (and related QuickTime up...

CVE-2011-0245

Apple QuickTime prior to version 7.7 is affected by a buffer overflow in the handling of pict files, allowing remote code execution or denial of service. Affected component: QuickTime (Windows/Mac). Root cause: buffer overflow when parsing pict data. Impact: arbitrary code execution or applicatio...

CVE-2011-3247

Apple QuickTime for Windows with versions before 7.7.1 is affected by an integer overflow in PICT file handling that can cause a heap buffer overflow, enabling remote code execution or a denial of service when processing crafted files. The vulnerability specifically involves PnPixPat PatType 3 pa...

CVE-2011-0247

CVE-2011-0247 relates to multiple stack-based buffer overflows in Apple QuickTime on Windows, caused by improper bounds checking while parsing H.264 movie data. Exploitation allows remote arbitrary code execution or a crash (denial of service). Affected product is Apple QuickTime (Windows), with ...