Lucene search

K
cve[email protected]CVE-2006-4388
HistorySep 12, 2006 - 11:07 p.m.

CVE-2006-4388

2006-09-1223:07:00
NVD-CWE-Other
web.nvd.nist.gov
23
cve-2006-4388
integer overflow
apple quicktime
remote code execution
crafted flashpix file

7.3 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.107 Low

EPSS

Percentile

94.9%

Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix file.

7.3 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.107 Low

EPSS

Percentile

94.9%