Apple

Quicktime

246 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2008-3624

  • EPSS 2.52%
  • Published 11.09.2008 01:13:09
  • Last modified 09.04.2025 00:30:58

Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted panorama atoms.

9.3

CVE-2008-3625

  • EPSS 21.15%
  • Published 11.09.2008 01:13:09
  • Last modified 09.04.2025 00:30:58

Stack-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted (1) maxTilt, (2) minFieldOfV...

6.8

CVE-2008-3626

  • EPSS 4.01%
  • Published 11.09.2008 01:13:09
  • Last modified 09.04.2025 00:30:58

The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory ...

9.3

CVE-2008-3627

  • EPSS 17.9%
  • Published 11.09.2008 01:13:09
  • Last modified 09.04.2025 00:30:58

Apple QuickTime before 7.5.5 does not properly handle (1) MDAT atoms in MP4 video files within QuickTimeH264.qtx, (2) MDAT atoms in mov video files within QuickTimeH264.scalar, and (3) AVC1 atoms in an unknown media type within an unspecified compone...

9.3

CVE-2008-3628

  • EPSS 4.94%
  • Published 11.09.2008 01:13:09
  • Last modified 09.04.2025 00:30:58

Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, related to an "invalid pointer issue."

4.3

CVE-2008-3629

  • EPSS 1.35%
  • Published 11.09.2008 01:13:09
  • Last modified 09.04.2025 00:30:58

Apple QuickTime before 7.5.5 allows remote attackers to cause a denial of service (application crash) via a crafted PICT image that triggers an out-of-bounds read.

9.3

CVE-2008-3635

  • EPSS 2.41%
  • Published 11.09.2008 01:13:09
  • Last modified 09.04.2025 00:30:58

Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 (aka IV32) codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, allows remote attackers to execute arbitrary code or cause a d...

6.8

CVE-2008-1739

  • EPSS 1.26%
  • Published 03.09.2008 19:42:00
  • Last modified 09.04.2025 00:30:58

Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption.

6.8

CVE-2008-1581

  • EPSS 19.59%
  • Published 10.06.2008 18:32:00
  • Last modified 09.04.2025 00:30:58

Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted packed scanlines in PixData structures in a PICT image.

6.8

CVE-2008-1582

  • EPSS 11.11%
  • Published 10.06.2008 18:32:00
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AAC-encoded file that triggers memory corruption.