Lucene search

[email protected]CVE-2009-0956

HistoryJun 02, 2009 - 6:30 p.m.

CVE-2009-0956

2009-06-0218:30:00

CWE-399

[email protected]

web.nvd.nist.gov

apple

quicktime

cve-2009-0956

memory handling

vulnerability

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.2%

JSON

Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero.

Affected configurations

NVD

Node

applequicktimeRange≤7.6.1

applequicktimeMatch-

applequicktimeMatch3.0

applequicktimeMatch4.1.2

applequicktimeMatch4.1.2-mac

applequicktimeMatch4.1.2-windows

applequicktimeMatch5.0

applequicktimeMatch5.0.1

applequicktimeMatch5.0.1-mac

applequicktimeMatch5.0.1-windows

applequicktimeMatch5.0.2

applequicktimeMatch5.0.2-mac

applequicktimeMatch5.0.2-windows

applequicktimeMatch6.0

applequicktimeMatch6.0-windows

applequicktimeMatch6.0.0

applequicktimeMatch6.0.0-mac

applequicktimeMatch6.0.0-windows

applequicktimeMatch6.0.1

applequicktimeMatch6.0.1-mac

applequicktimeMatch6.0.1-windows

applequicktimeMatch6.0.2

applequicktimeMatch6.0.2-mac

applequicktimeMatch6.0.2-windows

applequicktimeMatch6.1

applequicktimeMatch6.1.0

applequicktimeMatch6.1.0-mac

applequicktimeMatch6.1.0-windows

applequicktimeMatch6.1.1

applequicktimeMatch6.1.1-mac

applequicktimeMatch6.1.1-windows

applequicktimeMatch6.2.0

applequicktimeMatch6.2.0-mac

applequicktimeMatch6.2.0-windows

applequicktimeMatch6.3.0

applequicktimeMatch6.3.0-mac

applequicktimeMatch6.3.0-windows

applequicktimeMatch6.4.0

applequicktimeMatch6.4.0-mac

applequicktimeMatch6.4.0-windows

applequicktimeMatch6.5

applequicktimeMatch6.5.0

applequicktimeMatch6.5.0-mac

applequicktimeMatch6.5.0-windows

applequicktimeMatch6.5.1

applequicktimeMatch6.5.1-mac

applequicktimeMatch6.5.1-windows

applequicktimeMatch6.5.2

applequicktimeMatch6.5.2-mac

applequicktimeMatch6.5.2-windows

applequicktimeMatch7.0

applequicktimeMatch7.0windows

applequicktimeMatch7.0-windows

applequicktimeMatch7.0.0

applequicktimeMatch7.0.0-mac

applequicktimeMatch7.0.0-windows

applequicktimeMatch7.0.1

applequicktimeMatch7.0.1windows

applequicktimeMatch7.0.1-mac

applequicktimeMatch7.0.1-windows

applequicktimeMatch7.0.2

applequicktimeMatch7.0.2windows

applequicktimeMatch7.0.2-mac

applequicktimeMatch7.0.2-windows

applequicktimeMatch7.0.3

applequicktimeMatch7.0.3-mac

applequicktimeMatch7.0.3-windows

applequicktimeMatch7.0.4

applequicktimeMatch7.0.4-mac

applequicktimeMatch7.0.4-windows

applequicktimeMatch7.1

applequicktimeMatch7.1.0

applequicktimeMatch7.1.0-mac

applequicktimeMatch7.1.0-windows

applequicktimeMatch7.1.1

applequicktimeMatch7.1.1-mac

applequicktimeMatch7.1.1-windows

applequicktimeMatch7.1.2

applequicktimeMatch7.1.2-mac

applequicktimeMatch7.1.2-windows

applequicktimeMatch7.1.3

applequicktimeMatch7.1.3-mac

applequicktimeMatch7.1.3-windows

applequicktimeMatch7.1.4

applequicktimeMatch7.1.4-mac

applequicktimeMatch7.1.4-windows

applequicktimeMatch7.1.5

applequicktimeMatch7.1.5-mac

applequicktimeMatch7.1.5-windows

applequicktimeMatch7.1.6

applequicktimeMatch7.1.6-mac

applequicktimeMatch7.1.6-windows

applequicktimeMatch7.2

applequicktimeMatch7.2vista

applequicktimeMatch7.2.0

applequicktimeMatch7.2.0-mac

applequicktimeMatch7.2.0-windows

applequicktimeMatch7.2.1

applequicktimeMatch7.2.1-mac

applequicktimeMatch7.2.1-windows

applequicktimeMatch7.3

applequicktimeMatch7.3.0

applequicktimeMatch7.3.0-mac

applequicktimeMatch7.3.0-windows

applequicktimeMatch7.3.1

applequicktimeMatch7.3.1-mac

applequicktimeMatch7.3.1-windows

applequicktimeMatch7.3.1.70

applequicktimeMatch7.4

applequicktimeMatch7.4.0

applequicktimeMatch7.4.0-mac

applequicktimeMatch7.4.0-windows

applequicktimeMatch7.4.1

applequicktimeMatch7.4.1-mac

applequicktimeMatch7.4.1-windows

applequicktimeMatch7.4.4

applequicktimeMatch7.4.5

applequicktimeMatch7.4.5-mac

applequicktimeMatch7.4.5-windows

applequicktimeMatch7.5

applequicktimeMatch7.5.0

applequicktimeMatch7.5.0-mac

applequicktimeMatch7.5.0-windows

applequicktimeMatch7.5.5

applequicktimeMatch7.5.5-mac

applequicktimeMatch7.5.5-windows

applequicktimeMatch7.6.0

CPENameOperatorVersion
apple:quicktimeapple quicktimele7.6.1
apple:quicktimeapple quicktimeeq-
apple:quicktimeapple quicktimeeq3.0
apple:quicktimeapple quicktimeeq4.1.2
apple:quicktimeapple quicktimeeq5.0
apple:quicktimeapple quicktimeeq5.0.1
apple:quicktimeapple quicktimeeq5.0.2
apple:quicktimeapple quicktimeeq6.0
apple:quicktimeapple quicktimeeq6.0.0
apple:quicktimeapple quicktimeeq6.0.1

CPE	Name	Operator	Version
apple:quicktime	apple quicktime	le	7.6.1
apple:quicktime	apple quicktime	eq	-
apple:quicktime	apple quicktime	eq	3.0
apple:quicktime	apple quicktime	eq	4.1.2
apple:quicktime	apple quicktime	eq	5.0
apple:quicktime	apple quicktime	eq	5.0.1
apple:quicktime	apple quicktime	eq	5.0.2
apple:quicktime	apple quicktime	eq	6.0
apple:quicktime	apple quicktime	eq	6.0.0
apple:quicktime	apple quicktime	eq	6.0.1

Rows per page:

1-10 of 511

References

lists.apple.com/archives/security-announce/2009/Jun/msg00000.html

secunia.com/advisories/35091

support.apple.com/kb/HT3591

www.securityfocus.com/bid/35162

www.securitytracker.com/id?1022314

www.vupen.com/english/advisories/2009/1469

exchange.xforce.ibmcloud.com/vulnerabilities/50896

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16188

Social References

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.2%

JSON

Related for CVE-2009-0956

cvelist1 prion1 nvd1 openvas2 nessus3