"We The People"

Wednesday, November 07, 2007

Britney Spears, Apple's Quicktime and New Spam Attacks - The Chart - IT Channel News And Views by CRN and VARBusiness

Britney Spears, Apple's Quicktime and New Spam Attacks - The Chart - IT Channel News And Views by CRN and VARBusiness

* A memory corruption bug which can be triggered by a maliciously crafted movie. It could potentially result in arbitrary code execution (CVE-2007-2395)

* A heap overflow in the use of Sample Table Sample Descriptor atoms, which can be triggered through maliciously crafted movie files. It could potentially result in arbitrary code execution (CVE-2007-3750).

* Vulnerabilities in Quicktime for Java which could allow untrusted applets to obtain elevated privileges (CVE-2007-3751).

* Two bugs in PICT file processing, potentially resulting in arbitrary code execution (CVE-2007-4672).

* A bug in QTVR movie file parsing which could result in arbitrary code execution (CVE-2007-4675).

* A bug in the parsing of color table atoms which could result in arbitrary code execution (CVE-2007-4677).

Join

Name:
Email Address:

form mail