CVSS: 9.3EPSS: 4%CPEs: 45EXPL: 0CVE-2014-1246 – Apple QuickTime ftab Atom Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2014-1246
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ftab atom in a movie file. Desbordamiento de buffer en Apple QuickTime anterior a 7.7.5 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (caída de aplicación) a través de un átomo ftab manipulado en un archivo de vídeo. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the ftab atom. By providing an overly large font name, an attacker can overflow a fixed size stack buffer. • http://support.apple.com/kb/HT6150 http://support.apple.com/kb/HT6151 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 2%CPEs: 45EXPL: 0CVE-2014-1247 – Apple QuickTime dref Atom Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2014-1247
Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted dref atom in a movie file. Apple QuickTime anterior a 7.7.5 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un átomo dref manipulado en un archivo de vídeo. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the dref atom. It is possible for an attacker to nest atoms within the dref atom that have sizes larger than the enclosing atom. • http://support.apple.com/kb/HT6150 http://support.apple.com/kb/HT6151 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 45EXPL: 0CVE-2014-1250
https://notcve.org/view.php?id=CVE-2014-1250
Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted ttfo element in a movie file. Apple QuickTime anterior a 7.7.5 no realiza debidamente una operación de intercambio de bytes, lo que permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (acceso a memoria fuera de rango y caída de aplicación) a través de un elemento ttfo manipulado en un archivo de vídeo. • http://support.apple.com/kb/HT6150 http://support.apple.com/kb/HT6151 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 1%CPEs: 45EXPL: 0CVE-2014-1248
https://notcve.org/view.php?id=CVE-2014-1248
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ldat atom in a movie file. Desbordamiento de buffer en Apple QuickTime anterior a 7.7.5 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (caída de aplicación) a través de un átomo ldat manipulado en un archivo de vídeo. • http://support.apple.com/kb/HT6150 http://support.apple.com/kb/HT6151 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 6EXPL: 0CVE-2010-1819
https://notcve.org/view.php?id=CVE-2010-1819
Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) CoreVideo.dll, (2) CoreGraphics.dll, or (3) CoreAudioToolbox.dll that is located in the same folder as a .pic image file. Vulnerabilidad de ruta de búsqueda no confiable en Picture Viewer en Apple QuickTime anteriores a 7.6.8 permite a usuarios locales, y posiblemente a atacantes remotos, ejecutar código arbitrario y ataques de secuestro de DLLs a través de (1) CoreVideo.dll, (2) CoreGraphics.dll, o (3) CoreAudioToolbox.dll troyanizadas en el mismo directorio que una imagen .pic. • http://lists.apple.com/archives/security-announce/2010/Sep/msg00003.html http://support.apple.com/kb/HT4339 http://www.fortiguard.com/advisory/FGA-2010-46 •