Vulnerabilities > Apple > Critical

DATE CVE VULNERABILITY TITLE RISK
2009-06-02 CVE-2009-0957 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 image.
network
apple CWE-119
critical
9.3
2009-06-02 CVE-2009-0956 Resource Management Errors vulnerability in Apple Quicktime
Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero.
network
apple CWE-399
critical
9.3
2009-06-02 CVE-2009-0955 Code Injection vulnerability in Apple Quicktime
Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a "sign extension issue."
network
apple CWE-94
critical
9.3
2009-06-02 CVE-2009-0954 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime
Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie file containing crafted Clipping Region (CRGN) atom types.
network
apple CWE-119
critical
9.3
2009-06-02 CVE-2009-0953 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
network
apple CWE-119
critical
9.3
2009-06-02 CVE-2009-0952 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime
Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted compressed PSD image.
network
apple CWE-119
critical
9.3
2009-06-02 CVE-2009-0951 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC compression file.
network
apple CWE-119
critical
9.3
2009-06-02 CVE-2009-0950 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Itunes
Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.
network
apple CWE-119
critical
9.3
2009-06-02 CVE-2009-0188 Resource Management Errors vulnerability in Apple Quicktime
Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie composed of a Sorenson 3 video file.
network
apple CWE-399
critical
9.3
2009-06-02 CVE-2009-0185 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted MS ADPCM encoded audio data in an AVI movie file.
network
apple CWE-119
critical
9.3