Ryan Pentney

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, and CVE-2015-7092.

**Name of the Vulnerable Software and Affected Versions** Apple QuickTime versions prior to 7.7.8 **Description** The issue is caused by a buffer overflow in the QuickTime multimedia package. This allows a remote attacker to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted file. **Recommendations** For Apple QuickTime versions prior to 7.7.8, update to version 7.7.8 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted files that could trigger the buffer overflow until a patch is applied. Restrict access to potentially vulnerable components of the QuickTime package to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** QuickTime (affected versions not specified) **Description** The issue is caused by a buffer overflow in the QuickTime multimedia package. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service using a specially crafted file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QuickTime (affected versions not specified) **Description** The issue is caused by a buffer overflow in the QuickTime multimedia package. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service using a specially crafted file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QuickTime (affected versions not specified) **Description** The issue is caused by a buffer overflow in the QuickTime multimedia package. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service using a specially crafted file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QuickTime (affected versions not specified) **Description** The issue is caused by a buffer overflow in the QuickTime multimedia package. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service using a specially crafted file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QuickTime (affected versions not specified) **Description** The issue is caused by a buffer overflow in the QuickTime multimedia package. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service using a specially crafted file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QuickTime (affected versions not specified) **Description** The issue is caused by a buffer overflow in the QuickTime multimedia package. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service using a specially crafted file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3668.

**Name of the Vulnerable Software and Affected Versions** Pidgin versions prior to 2.10.8 **Description** The issue is related to the STUN protocol implementation in libpurple. It allows remote STUN servers to cause a denial of service by triggering a socket read error, leading to an out-of-bounds write operation and application crash. This can be exploited by a remote attacker to manipulate software sockets and cause a denial of service. **Recommendations** For versions prior to 2.10.8, update to version 2.10.8 or later to resolve the issue. As a temporary workaround, consider restricting access to remote STUN servers to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Pidgin versions prior to 2.10.8 **Description** The issue is related to an integer overflow in the Gadu-Gadu parser, which can be triggered by a large Content-Length value, potentially leading to a buffer overflow. This can allow remote attackers to have an unspecified impact. The vulnerability is also described as allowing a remote attacker to cause a denial of service or execute arbitrary code by manipulating HTTP requests to the gadu-gadu.pl domain. **Recommendations** For versions prior to 2.10.8, update to version 2.10.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the gg http watch fd function to minimize the risk of exploitation. Avoid using the vulnerable Gadu-Gadu parser until the issue is resolved.