CVE-2010-1819

2013-12-2701:55:05

[email protected]

web.nvd.nist.gov

cve-2010-1819

untrusted search path

apple quicktime

arbitrary code execution

dll hijacking

corevideo.dll

coregraphics.dll

coreaudiotoolbox.dll

trojan horse

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

77.2%

JSON

Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) CoreVideo.dll, (2) CoreGraphics.dll, or (3) CoreAudioToolbox.dll that is located in the same folder as a .pic image file.

Affected configurations

NVD

Node

applequicktimeRange≤7.6.7

applequicktimeMatch7.6.0

applequicktimeMatch7.6.1

applequicktimeMatch7.6.2

applequicktimeMatch7.6.5

applequicktimeMatch7.6.6

CPENameOperatorVersion
apple:quicktimeapple quicktimele7.6.7
apple:quicktimeapple quicktimeeq7.6.0
apple:quicktimeapple quicktimeeq7.6.1
apple:quicktimeapple quicktimeeq7.6.2
apple:quicktimeapple quicktimeeq7.6.5
apple:quicktimeapple quicktimeeq7.6.6

CPE	Name	Operator	Version
apple:quicktime	apple quicktime	le	7.6.7
apple:quicktime	apple quicktime	eq	7.6.0
apple:quicktime	apple quicktime	eq	7.6.1
apple:quicktime	apple quicktime	eq	7.6.2
apple:quicktime	apple quicktime	eq	7.6.5
apple:quicktime	apple quicktime	eq	7.6.6