Lucene search

[email protected]CVE-2005-2754

HistoryNov 05, 2005 - 11:02 a.m.

CVE-2005-2754

2005-11-0511:02:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2005-2754

apple quicktime

integer overflow

arbitrary code execution

mov file

nvd

7.3 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

JSON

Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with “Improper movie attributes.”

CPENameOperatorVersion
apple:quicktimeapple quicktimeeq7.0.1
apple:quicktimeapple quicktimeeq7.0
apple:quicktimeapple quicktimeeq6.5.2
apple:quicktimeapple quicktimele7.0.2

CPE	Name	Operator	Version
apple:quicktime	apple quicktime	eq	7.0.1
apple:quicktime	apple quicktime	eq	7.0
apple:quicktime	apple quicktime	eq	6.5.2
apple:quicktime	apple quicktime	le	7.0.2

References

docs.info.apple.com/article.html?artnum=302772

pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt

secunia.com/advisories/17428

securitytracker.com/id?1015152

www.osvdb.org/20476

www.securityfocus.com/archive/1/415709/30/0/threaded

www.securityfocus.com/bid/15308

www.vupen.com/english/advisories/2005/2293

7.3 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

JSON

Related for CVE-2005-2754

cvelist1 securityvulns1 nessus2