Lucene search

K
cve[email protected]CVE-2006-1462
HistoryMay 12, 2006 - 8:06 p.m.

CVE-2006-1462

2006-05-1220:06:00
CWE-189
web.nvd.nist.gov
17
cve-2006-1462
apple quicktime
integer overflow
remote code execution

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.043 Low

EPSS

Percentile

92.4%

Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime H.264 (M4V) video format file.

Affected configurations

NVD
Node
applequicktimeRange7.0.4
OR
applequicktimeMatch7.0.0
OR
applequicktimeMatch7.0.1
OR
applequicktimeMatch7.0.2
OR
applequicktimeMatch7.0.3

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.043 Low

EPSS

Percentile

92.4%