APPLE QUICKTIME 7.7 MOVIE

An attacker can exploit this, with a specially crafted file, to corrupt memory, potentially resulting in the execution of arbitrary code. (CVE-2015-3665) - A memory corruption flaw exists due to improper validation of user-supplied input when handling the 'code' atom within the 'minf' (Media Information) atom.

APPLE QUICKTIME 7.7 MOVIE

An attacker can exploit this, with a specially crafted movie file, to dereference already freed memory, potentially resulting in the execution of arbitrary code. (CVE-2015-3664) - A user-after-free error exists when handling object properties in movie files. An attacker can exploit this, with a specially crafted file, to cause a stack-based buffer overflow, resulting in a denial of service condition or the execution of arbitrary code. (CVE-2015-3663) - An overflow condition exists due to improper validation of user-supplied input when handling 'alis' atoms. An attacker can exploit this, with a specially crafted image descriptor in a GIF file, to execute arbitrary code. (CVE-2015-3662) - An arbitrary code execution vulnerability exists due to an out-of-bounds write flaw caused by improper validation of user-supplied input. An attacker can exploit this, with specially crafted image data in a GIF file, to execute arbitrary code. (CVE-2015-3661) - An arbitrary code execution vulnerability exists due to an out-of-bounds write flaw caused by improper validation of user-supplied input. An attacker can exploit this, with specially crafted image data in an SGI file, to execute arbitrary code.

It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists due to improper validation of user-supplied input. Description The version of Apple QuickTime installed on the remote Windows host is prior to 7.7.7.

Synopsis The remote Windows host contains an application that is affected by multiple vulnerabilities.

Apple quicktime 7.7