jetlib.sec » Tags » memory-addresses

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

4 items tagged "memory addresses"

Related tags: apple quicktime player [+], apple quicktime [+], zero [+], string [+], mov file [+], day [+], vulnerability [+], url [+], quicktime [+], code execution [+]

• December 23, 2011
• 15:29

  Apple Quicktime Empty URL Data Handler Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to potentially disclose memory addresses on vulnerable installations of Apple QuickTime Player.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  url vulnerability quicktime apple-quicktime apple-quicktime-player code-execution memory-addresses  

• October 27, 2011
• 15:04

  Zero Day Initiative Advisory 11-311

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-311 - This vulnerability allows remote attackers to potentially disclose memory addresses on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how QuickTime.qts parses a data handler in specific atom within a .mov file. The application will utilize a string length to copy data into an heap buffer, if the string is of zero-length, the application will fail to copy anything and then proceed to use the uninitialized buffer as a string.

  Tags:  day zero string apple-quicktime apple-quicktime-player memory-addresses mov-file  

• 15:04

  Zero Day Initiative Advisory 11-311

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-311 - This vulnerability allows remote attackers to potentially disclose memory addresses on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how QuickTime.qts parses a data handler in specific atom within a .mov file. The application will utilize a string length to copy data into an heap buffer, if the string is of zero-length, the application will fail to copy anything and then proceed to use the uninitialized buffer as a string.

  Tags:  day zero string apple-quicktime apple-quicktime-player memory-addresses mov-file  

• 15:04

  Zero Day Initiative Advisory 11-311

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-311 - This vulnerability allows remote attackers to potentially disclose memory addresses on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how QuickTime.qts parses a data handler in specific atom within a .mov file. The application will utilize a string length to copy data into an heap buffer, if the string is of zero-length, the application will fail to copy anything and then proceed to use the uninitialized buffer as a string.

  Tags:  day zero string apple-quicktime apple-quicktime-player memory-addresses mov-file