Apple QuickTime for Windows Memory Corruption Errors Let Remote Users Execute Arbitrary C ode : 8/21/2015 1:57:50 AM
 | Communicate with co-workers in real time. Used by Netflix, Dropbox & Salesforce. $0/unlimited users. Get started >> From our sponsors  |
| Vulnerability Databse |
| This module replaces the description field of a feed to the page it links to (in addition, it wipes out the content:encoded field), so you can get its full text. |
Apple QuickTime for Windows Memory Corruption Errors Let Remote Users Execute Arbitrary C ode
8/21/2015 12:00:00 AM
| Apple QuickTime for Windows Memory Corruption Errors Let Remote Users Execute Arbitrary C ode |
| SecurityTracker Alert ID: 1033346 |
| SecurityTracker URL: http://securitytracker.com/id/1033346 |
| CVE Reference: CVE-2015-5785, CVE-2015-5786 (Links to External Site) |
| Date: Aug 21 2015 |
| Impact: Execution of arbitrary code via network, User access via network |
| Fix Available: Yes Vendor Confirmed: Yes |
| Version(s): prior to 7.7.8 |
| Description: Two vulnerabilities were reported in Apple QuickTime for Windows. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can create a specially crafted file that, when loaded by the target user, will trigger a memory corruption error and execute arbitrary code on the target user's system [CVE-2015-5785, CVE-2015-5786]. Fortinet's FortiGuard Labs and Ryan Pentney and Richard Johnson of Cisco Talos reported these vulnerabilities. |
| Impact: A remote user can create content that, when loaded by the target user, will execute arbitrary code on the target user's system. |
| Solution: The vendor has issued a fix (7.7.8). The vendor's advisory is available at: https://support.apple.com/en-us/HT205046 |
| Vendor URL: support.apple.com/en-us/HT205046 (Links to External Site) |
| Cause: Access control error |
| Underlying OS: Windows (7), Windows (Vista) |
| |
| Message History: None. |
You are receiving this email because you subscribed to this feed at feedmyinbox.com
If you no longer wish to receive these emails, you can unsubscribe from this feed, or manage all your subscriptions
