Tom Ferris

A buffer overflow issue in ImageIO allows remote attackers to execute arbitrary code or cause a denial of service via a crafted GIF file.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted H.264 movie file.

Name of the Vulnerable Software and Affected Versions: Apple QuickTime versions prior to 7.3.1 Description: The issue is related to multiple unspecified vulnerabilities in the Flash media handler of Apple QuickTime. These vulnerabilities can be exploited by remote attackers via a crafted QuickTime movie, potentially allowing the execution of arbitrary code or having other unspecified impacts. Recommendations: For versions prior to 7.3.1, update to version 7.3.1 or later to resolve the issue.

The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and possibly execute arbitrary code via a crafted PICT file. This is due to memory corruption in the ` GetSrcBits32ARGB` function triggered by the `InternalUnpackBits` function in Apple QuickDraw.

The issue allows remote attackers to execute arbitrary code via a crafted HTML file, which accesses previously deallocated objects.

The issue is related to a format string vulnerability in the NSRunAlertPanel function. This vulnerability allows remote attackers to cause a denial of service, potentially leading to an application crash, and may also enable the execution of arbitrary code. The attack vector involves a malformed Skype URL.

The issue is related to an unspecified vulnerability in ImageIO, which can be triggered by a crafted GIF image. This can cause a denial of service, resulting in a system crash, and potentially allow the execution of arbitrary code due to a memory allocation failure that is not properly handled.

The issue is related to an integer overflow in ImageIO, which can be triggered by a malformed GIF image. This could allow user-assisted attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code.

The issue is related to the compression state handling in Bom, allowing user-assisted attackers to cause a denial of service, potentially leading to application crashes, and possibly execute arbitrary code via a crafted Zip archive.

The issue allows remote attackers to cause a denial of service, resulting in a client crash. This is achieved through an IFRAME element with a large value of the `WIDTH` attribute. The large value triggers a problem related to the representation of floating-point numbers, leading to an infinite loop of widget resizes and a corresponding large number of function calls on the stack.

A buffer overflow issue exists in the International Domain Name (IDN) support, allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character 0xAD). This is due to improper handling by the NormalizeIDN call in `nsStandardURL::BuildNormalizedSpec()`.

The issue allows remote attackers to cause a denial of service, resulting in a system crash, by sending crafted Remote Desktop Protocol (RDP) requests to the Microsoft Windows kernel.