Show filters
98 Total Results
Displaying 91-98 of 98
Sort by:
Attacker Value
Unknown
CVE-2008-3626
Disclosure Date: September 11, 2008 (last updated October 04, 2023)
The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.
0
Attacker Value
Unknown
CVE-2008-3624
Disclosure Date: September 11, 2008 (last updated October 04, 2023)
Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted panorama atoms.
0
Attacker Value
Unknown
CVE-2008-3635
Disclosure Date: September 11, 2008 (last updated October 04, 2023)
Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 (aka IV32) codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
0
Attacker Value
Unknown
CVE-2008-3614
Disclosure Date: September 11, 2008 (last updated October 04, 2023)
Integer overflow in Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, which triggers heap corruption.
0
Attacker Value
Unknown
CVE-2008-1739
Disclosure Date: September 03, 2008 (last updated October 04, 2023)
Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption.
0
Attacker Value
Unknown
CVE-2007-6166
Disclosure Date: November 29, 2007 (last updated October 04, 2023)
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.
0
Attacker Value
Unknown
CVE-2007-2388
Disclosure Date: May 29, 2007 (last updated October 04, 2023)
Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations.
0
Attacker Value
Unknown
CVE-2007-2389
Disclosure Date: May 29, 2007 (last updated October 04, 2023)
Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not clear potentially sensitive memory before use, which allows remote attackers to read memory from a web browser via unknown vectors related to Java applets.
0
