jetlib.sec » Tags » apple-lossless

Feeds

133337 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

5 items tagged "apple lossless"

Related tags: code execution [+], apple quicktime [+], zero [+], memory corruption [+], initiative [+], day [+], audio [+], x quicktime [+], vulnerability [+], quicktime apple [+], integer overflow vulnerability [+], integer [+], codec [+], code [+], audio codec [+], apple mac os [+]

• November 21, 2011
• 11:24

  Apple Quicktime Apple Lossless Audio Codec Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  code audio vulnerability apple-lossless apple-quicktime quicktime-apple audio-codec code-execution  

• June 29, 2011
• 22:36

  Zero Day Initiative Advisory 11-230

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-230 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktime handles Apple Lossless Audio Codec streams. While parsing the sample description for the 'alac' codec an integer wrap can occur that results in the allocation of a memory buffer that is smaller than intended. When Quicktime writes to this buffer it causes a memory corruption that can lead to remote code execution under the context of the current user.

  Tags:  day zero initiative apple-lossless apple-quicktime memory-corruption code-execution  

• 22:36

  Zero Day Initiative Advisory 11-230

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-230 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktime handles Apple Lossless Audio Codec streams. While parsing the sample description for the 'alac' codec an integer wrap can occur that results in the allocation of a memory buffer that is smaller than intended. When Quicktime writes to this buffer it causes a memory corruption that can lead to remote code execution under the context of the current user.

  Tags:  day zero initiative apple-lossless apple-quicktime memory-corruption code-execution  

• 22:36

  Zero Day Initiative Advisory 11-230

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-230 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktime handles Apple Lossless Audio Codec streams. While parsing the sample description for the 'alac' codec an integer wrap can occur that results in the allocation of a memory buffer that is smaller than intended. When Quicktime writes to this buffer it causes a memory corruption that can lead to remote code execution under the context of the current user.

  Tags:  day zero initiative apple-lossless apple-quicktime memory-corruption code-execution  

• 0:00

  Vuln: Apple Mac OS X Quicktime 'Apple Lossless Audio Codec' Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apple Mac OS X Quicktime 'Apple Lossless Audio Codec' Integer Overflow Vulnerability

  Tags:  integer audio codec apple-lossless apple-mac-os x-quicktime integer-overflow-vulnerability