jetlib.sec » Tags » quicktime-media

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

5 items tagged "quicktime media"

Related tags: apple quicktime [+], code [+], zero [+], stack buffer [+], src parameter [+], parameter [+], media [+], code execution [+], vulnerability [+], src [+], remote [+]

• December 29, 2011
• 20:19

  Apple Quicktime Media Link src Parameter Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  code vulnerability media apple-quicktime quicktime-media code-execution  

• August 17, 2011
• 8:00

  Bugtraq: ZDI-11-256: Apple QuickTime Media Link src Parameter Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-11-256: Apple QuickTime Media Link src Parameter Remote Code Execution Vulnerability

  Tags:  media src remote quicktime-media code-execution apple-quicktime  

• August 16, 2011
• 6:26

  Zero Day Initiative Advisory 11-256

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-256 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way QuickTime parses QuickTime Media Link (.qtl) files. The code which parses the .qtl parameter files fails to properly validate the size of the src parameter before copying it into a fixed length stack buffer. By supplying an overly long value for the src parameter, an attacker can leverage this flaw to execute malicious code within the context of the browser.

  Tags:  zero code parameter apple-quicktime quicktime-media stack-buffer src-parameter  

• 6:26

  Zero Day Initiative Advisory 11-256

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-256 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way QuickTime parses QuickTime Media Link (.qtl) files. The code which parses the .qtl parameter files fails to properly validate the size of the src parameter before copying it into a fixed length stack buffer. By supplying an overly long value for the src parameter, an attacker can leverage this flaw to execute malicious code within the context of the browser.

  Tags:  zero code parameter apple-quicktime quicktime-media stack-buffer src-parameter  

• 6:26

  Zero Day Initiative Advisory 11-256

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-256 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way QuickTime parses QuickTime Media Link (.qtl) files. The code which parses the .qtl parameter files fails to properly validate the size of the src parameter before copying it into a fixed length stack buffer. By supplying an overly long value for the src parameter, an attacker can leverage this flaw to execute malicious code within the context of the browser.

  Tags:  zero code parameter apple-quicktime quicktime-media stack-buffer src-parameter