Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3720 State: PUBLISHED Published: 2012-09-20T21:00:00Z Last Updated: 2024-09-16T17:08:01.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes for external-account use even if external accounts are not enabled, which might allow remote attackers to determine passwords via unspecified access to a mobile account. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501
CVE ID: CVE-2012-3721 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Profile Manager in Apple Mac OS X before 10.7.5 does not properly perform authentication for the Device Management private interface, which allows attackers to enumerate managed devices via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78746
CVE ID: CVE-2012-3722 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://lists.apple.com/archives/security-announce/2012/Sep/ms
2/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78715
CVE ID: CVE-2012-3723 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X before 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor, which allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption and system crash) by attaching a USB device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78750 - http://support.apple.com/kb/HT5501
CVE ID: CVE-2012-3724 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which allows remote attackers to obtain sensitive information by leveraging the construction of an HTTP request with an incorrect hostname derived from a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/85637 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78723
CVE ID: CVE-2012-3725 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNAv4 protocol implementation in the DHCP component in Apple iOS before 6 sends Wi-Fi packets containing a MAC address of a host on a previously used network, which might allow remote attackers to obtain sensitive information about previous device locations by sniffing an unencrypted Wi-Fi network for these packets. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://exchange.xforce.ibmcloud.
chives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78720
CVE ID: CVE-2012-3726 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78716
CVE ID: CVE-2012-3727 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IPsec component in Apple iOS before 6 allows remote attackers to execute arbitrary code via a crafted racoon configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78710 - http://osvdb.org/85630
CVE ID: CVE-2012-3728 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 6 dereferences invalid pointers during the handling of packet-filter data structures, which allows local users to gain privileges via a crafted program that makes packet-filter ioctl calls. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://osvdb.org/85629
CVE ID: CVE-2012-3729 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Berkeley Packet Filter (BPF) interpreter implementation in the kernel in Apple iOS before 6 accesses uninitialized memory locations, which allows local users to obtain sensitive information about the layout of kernel memory via a crafted program that uses a BPF interface. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://osvdb.org/85627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
ml - http://support.apple.com/kb/HT5503 - http://osvdb.org/85627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78724
CVE ID: CVE-2012-3730 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Apple iOS before 6 does not properly handle reuse of Content-ID header values, which allows remote attackers to spoof attachments via a header value that was also used in a previous e-mail message, as demonstrated by a message from a different sender. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78717 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://osvdb.org/85626
CVE ID: CVE-2012-3731 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://osvdb.org/85643
CVE ID: CVE-2012-3732 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Apple iOS before 6 uses an S/MIME message's From address as the displayed sender address, which allows remote attackers to spoof signed content via an e-mail message in which the From field does not match the signer's identity. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78719 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://osvdb.org/85625 - http://support.apple.com/kb/HT5503
CVE ID: CVE-2012-3733 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Messages in Apple iOS before 6, when multiple iMessage e-mail addresses are configured, does not ensure that a reply's sender address matches the recipient address of the original message, which allows remote attackers to obtain potentially sensitive information about alternate e-mail addresses in opportunistic circumstances by reading a reply. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://o
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://osvdb.org/85624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78686
CVE ID: CVE-2012-3734 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended (1) Data Protection level or (2) encryption state by reading the temporary content. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://osvdb.org/85642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78709
CVE ID: CVE-2012-3735 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature, which allows physically proximate attackers to see the most recently used third-party app by watching the device's screen. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/85640 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78683
CVE ID: CVE-2012-3736 State: PUBLISHED Published: 2012-09-20T21:00:00Z Last Updated: 2024-09-17T00:06:28.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503
CVE ID: CVE-2012-3737 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically proximate attackers to view arbitrary stored photos by spoofing a time value. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://osvdb.org/85634
CVE ID: CVE-2012-3738 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allows physically proximate attackers to bypass intended access restrictions and make FaceTime calls through Voice Dialing, or obtain sensitive contact information by attempting to make a FaceTime call and reading the contact suggestions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.a
ram Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://osvdb.org/85620
CVE ID: CVE-2012-3739 State: PUBLISHED Published: 2012-09-20T21:00:00Z Last Updated: 2024-09-16T22:24:43.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors involving use of the camera. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503
CVE ID: CVE-2012-3740 State: PUBLISHED Published: 2012-09-20T21:00:00Z Last Updated: 2024-09-17T00:25:53.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503
CVE ID: CVE-2012-3741 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action, which allows local users to bypass an intended Apple ID authentication step via an app that performs purchase transactions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78721 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503
CVE ID: CVE-2012-3742 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78708 - http://osvdb.org/85632
CVE ID: CVE-2012-3743 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:13:51.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Logs implementation in Apple iOS before 6 does not restrict /var/log access by sandboxed apps, which allows remote attackers to obtain sensitive information via a crafted app that reads log files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78718 - http://osvdb.org/85621
CVE ID: CVE-2012-3744 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:21:02.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telephony in Apple iOS before 6 uses an SMS message's return address as the displayed sender address, which allows remote attackers to spoof text communication via a message in which the return address does not match the originating address. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://osvdb.org/85622 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78687
CVE ID: CVE-2012-3745 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:21:03.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service (buffer overflow and connectivity outage) via a crafted user-data header in an SMS message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78722
CVE ID: CVE-2012-3746 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:21:03.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: UIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which allows context-dependent attackers to obtain cleartext file content by leveraging direct access to a device's filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://osvdb.org/85633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78706
CVE ID: CVE-2012-3747 State: PUBLISHED Published: 2012-09-20T21:00:00 Last Updated: 2024-08-06T20:21:02.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://osvdb.org/85631 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78725
CVE ID: CVE-2012-3748 State: PUBLISHED Published: 2012-11-03T17:00:00 Last Updated: 2024-08-06T20:21:02.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript arrays. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51445 - http://support.apple.com/kb/HT5567 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00003.html - http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html - http://lists.apple.com/arch
p/msg00003.html - http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html - http://lists.apple.com/archives/security-announce/2012/Nov/msg00001.html - http://support.apple.com/kb/HT5921 - http://www.securityfocus.com/bid/56362 - http://support.apple.com/kb/HT5568 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html - http://archives.neohapsis.com/archives/bugtraq/2012-11/0013.html - http://support.apple.com/kb/HT5598
CVE ID: CVE-2012-3749 State: PUBLISHED Published: 2012-11-03T17:00:00 Last Updated: 2024-08-06T20:21:02.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The extensions APIs in the kernel in Apple iOS before 6.0.1 provide kernel addresses in responses that contain an OSBundleMachOHeaders key, which makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56361 - http://secunia.com/advisories/51445 - http://support.apple.com/kb/HT5567 - http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html - http://lists.apple.com/archives/se
b/HT5567 - http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html - http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html - http://support.apple.com/kb/HT5598
CVE ID: CVE-2012-3750 State: PUBLISHED Published: 2012-11-03T17:00:00 Last Updated: 2024-08-06T20:21:02.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Passcode Lock implementation in Apple iOS before 6.0.1 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement and access Passbook passes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56363 - http://support.apple.com/kb/HT5567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79747 - http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html - http://archive
ud.com/vulnerabilities/79747 - http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html - http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html
CVE ID: CVE-2012-3751 State: PUBLISHED Published: 2012-11-09T19:00:00 Last Updated: 2024-08-06T20:21:04.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with a crafted _qtactivex_ parameter in an OBJECT element. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79897 - http://secunia.com/advisories/51226 - http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html - https://oval.cisecurity.org/repository/
226 - http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16166 - http://support.apple.com/kb/HT5581
CVE ID: CVE-2012-3752 State: PUBLISHED Published: 2012-11-09T19:00:00 Last Updated: 2024-08-06T20:21:02.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime TeXML file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51226 - http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html - http://www.securityfocus.com/bid/56557 - http://packetstormsecurity.com/files/118359/Apple-QuickTime-7.7.2-TeXML-Style-Element-font-table-Field
s.com/bid/56557 - http://packetstormsecurity.com/files/118359/Apple-QuickTime-7.7.2-TeXML-Style-Element-font-table-Field-Stack-Buffer-Overflow.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79899 - http://support.apple.com/kb/HT5581
CVE ID: CVE-2012-3753 State: PUBLISHED Published: 2012-11-09T19:00:00 Last Updated: 2024-08-06T20:21:03.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51226 - http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15947 - http://packetstormsecurity.com/files/118421/Apple-QuickTime-7.7.2-MIME-Ty