Lucene search

[email protected]CVE-2009-0003

HistoryJan 21, 2009 - 8:30 p.m.

CVE-2009-0003

2009-01-2120:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-0003

apple quicktime

buffer overflow

denial of service

arbitrary code execution

avi movie file

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.414 Medium

EPSS

Percentile

97.3%

JSON

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value in the _WAVEFORMATEX structure.

Affected configurations

NVD

Node

applequicktimeRange≤7.5.5

applequicktimeMatch-

applequicktimeMatch3.0

applequicktimeMatch4.1.2

applequicktimeMatch5.0

applequicktimeMatch5.0.1

applequicktimeMatch5.0.2

applequicktimeMatch6.0

applequicktimeMatch6.1

applequicktimeMatch6.5

applequicktimeMatch6.5.1

applequicktimeMatch6.5.2

applequicktimeMatch7.0

applequicktimeMatch7.0.1

applequicktimeMatch7.0.2

applequicktimeMatch7.0.3

applequicktimeMatch7.0.4

applequicktimeMatch7.1

applequicktimeMatch7.1.1

applequicktimeMatch7.1.2

applequicktimeMatch7.1.3

applequicktimeMatch7.1.4

applequicktimeMatch7.1.5

applequicktimeMatch7.1.6

applequicktimeMatch7.2

applequicktimeMatch7.3

applequicktimeMatch7.3.1

applequicktimeMatch7.3.1.70

applequicktimeMatch7.4

applequicktimeMatch7.4.1

applequicktimeMatch7.4.4

applequicktimeMatch7.4.5

applequicktimeMatch7.5

AND

applemac_os_xMatch10.4.9

applemac_os_xMatch10.5

applemac_os_xMatch10.5.1

applemac_os_xMatch10.5.2

applemac_os_xMatch10.5.3

applemac_os_xMatch10.5.4

applemac_os_xMatch10.5.5

microsoftwindows_vista

microsoftwindows_xpsp2

CPENameOperatorVersion
apple:quicktimeapple quicktimele7.5.5
apple:quicktimeapple quicktimeeq-
apple:quicktimeapple quicktimeeq3.0
apple:quicktimeapple quicktimeeq4.1.2
apple:quicktimeapple quicktimeeq5.0
apple:quicktimeapple quicktimeeq5.0.1
apple:quicktimeapple quicktimeeq5.0.2
apple:quicktimeapple quicktimeeq6.0
apple:quicktimeapple quicktimeeq6.1
apple:quicktimeapple quicktimeeq6.5

CPE	Name	Operator	Version
apple:quicktime	apple quicktime	le	7.5.5
apple:quicktime	apple quicktime	eq	-
apple:quicktime	apple quicktime	eq	3.0
apple:quicktime	apple quicktime	eq	4.1.2
apple:quicktime	apple quicktime	eq	5.0
apple:quicktime	apple quicktime	eq	5.0.1
apple:quicktime	apple quicktime	eq	5.0.2
apple:quicktime	apple quicktime	eq	6.0
apple:quicktime	apple quicktime	eq	6.1
apple:quicktime	apple quicktime	eq	6.5