Lucene search

K
cve[email protected]CVE-2009-0001
HistoryJan 21, 2009 - 8:30 p.m.

CVE-2009-0001

2009-01-2120:30:00
CWE-119
web.nvd.nist.gov
29
cve-2009-0001
buffer overflow
apple quicktime
denial of service
remote code execution
rtsp url

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.2 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL.

Affected configurations

NVD
Node
applequicktimeRange7.5.5
OR
applequicktimeMatch-
OR
applequicktimeMatch3.0
OR
applequicktimeMatch4.1.2
OR
applequicktimeMatch5.0
OR
applequicktimeMatch5.0.1
OR
applequicktimeMatch5.0.2
OR
applequicktimeMatch6.0
OR
applequicktimeMatch6.1
OR
applequicktimeMatch6.5
OR
applequicktimeMatch6.5.1
OR
applequicktimeMatch6.5.2
OR
applequicktimeMatch7.0
OR
applequicktimeMatch7.0.1
OR
applequicktimeMatch7.0.2
OR
applequicktimeMatch7.0.3
OR
applequicktimeMatch7.0.4
OR
applequicktimeMatch7.1
OR
applequicktimeMatch7.1.1
OR
applequicktimeMatch7.1.2
OR
applequicktimeMatch7.1.3
OR
applequicktimeMatch7.1.4
OR
applequicktimeMatch7.1.5
OR
applequicktimeMatch7.1.6
OR
applequicktimeMatch7.2
OR
applequicktimeMatch7.3
OR
applequicktimeMatch7.3.1
OR
applequicktimeMatch7.3.1.70
OR
applequicktimeMatch7.4
OR
applequicktimeMatch7.4.1
OR
applequicktimeMatch7.4.4
OR
applequicktimeMatch7.4.5
OR
applequicktimeMatch7.5
AND
applemac_os_xMatch10.4.9
OR
applemac_os_xMatch10.5
OR
applemac_os_xMatch10.5.1
OR
applemac_os_xMatch10.5.2
OR
applemac_os_xMatch10.5.3
OR
applemac_os_xMatch10.5.4
OR
applemac_os_xMatch10.5.5
OR
microsoftwindows_vista
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp3

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.2 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

Related for CVE-2009-0001