CVE-2006-1249

Related Files

McAfee-2006-0511.txt

Posted May 21, 2006

Authored by Mike Price

Two code execution vulnerabilities are present in Apple QuickDraw PICT image format support. Twenty one code execution vulnerabilities are present in Apple QuickTime support for various multimedia formats including: MOV, H.264, MPEG 4, AVI, FPX and SWF. Exploitation could lead to execution of arbitrary code. In order for an attack to succeed user interaction is required and therefore the risk factor for these issues is medium. Vulnerable systems include Mac OS X versions 10.4.6 and below without the May 2006 security update installed, QuickTime versions 7.0.4 and below for Mac OS X, and QuickTime for Windows versions 7.0.4 and below.

tags | advisory, arbitrary, vulnerability, code execution

systems | windows, apple, osx

advisories | CVE-2006-1249, CVE-2006-1453, CVE-2006-1454, CVE-2006-1459, CVE-2006-1460, CVE-2006-1461, CVE-2006-1462, CVE-2006-1464, CVE-2006-1465

SHA-256 | 8f07954712d0132d44032c1c58a7fa2505bdf2e850f835b45907c2298d579a60

Download | Favorite | View

EEYEB-20060307.txt

Posted May 21, 2006

Authored by Fang Xing | Site eeye.com

eEye Digital Security has discovered a critical vulnerability in QuickTime Player. There is a integer overflow in the way QuickTime processes fpx format files. An attacker can create a fpx file and send it to the user via email, web page, or fpx file with activex.

tags | advisory, web, overflow, activex

advisories | CVE-2006-1249

SHA-256 | 43adc773eca673b0b8c59d551604cc2d366d6bcdd7893a6ec67c822b737336af

Download | Favorite | View