Lucene search

AppleCVE-2011-0248

HistoryAug 04, 2011 - 2:45 a.m.

CVE-2011-0248

2011-08-0402:45:32

CWE-119

apple

web.nvd.nist.gov

cve-2011-0248

quicktime

activex

buffer overflow

windows

internet explorer

remote code execution

denial of service

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.436

Percentile

97.4%

JSON

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTL file.

Affected configurations

Nvd

Node

applequicktimeRange≤7.6.9

applequicktimeMatch3.0

applequicktimeMatch4.1.2

applequicktimeMatch5.0

applequicktimeMatch5.0.1

applequicktimeMatch5.0.2

applequicktimeMatch6.0

applequicktimeMatch6.0.0

applequicktimeMatch6.0.1

applequicktimeMatch6.0.2

applequicktimeMatch6.1

applequicktimeMatch6.1.0

applequicktimeMatch6.1.1

applequicktimeMatch6.2.0

applequicktimeMatch6.3.0

applequicktimeMatch6.4.0

applequicktimeMatch6.5

applequicktimeMatch6.5.0

applequicktimeMatch6.5.1

applequicktimeMatch6.5.2

applequicktimeMatch7.0

applequicktimeMatch7.0.0

applequicktimeMatch7.0.1

applequicktimeMatch7.0.2

applequicktimeMatch7.0.3

applequicktimeMatch7.0.4

applequicktimeMatch7.1

applequicktimeMatch7.1.0

applequicktimeMatch7.1.1

applequicktimeMatch7.1.2

applequicktimeMatch7.1.3

applequicktimeMatch7.1.4

applequicktimeMatch7.1.5

applequicktimeMatch7.1.6

applequicktimeMatch7.2

applequicktimeMatch7.2.0

applequicktimeMatch7.2.1

applequicktimeMatch7.3

applequicktimeMatch7.3.0

applequicktimeMatch7.3.1

applequicktimeMatch7.3.1.70

applequicktimeMatch7.4

applequicktimeMatch7.4.0

applequicktimeMatch7.4.1

applequicktimeMatch7.4.5

applequicktimeMatch7.5.0

applequicktimeMatch7.5.5

applequicktimeMatch7.6.0

applequicktimeMatch7.6.1

applequicktimeMatch7.6.2

applequicktimeMatch7.6.5

applequicktimeMatch7.6.6

applequicktimeMatch7.6.7

applequicktimeMatch7.6.8

AND

microsoftinternet_explorer

microsoftwindows_7

microsoftwindows_vista

microsoftwindows_xpsp2

microsoftwindows_xpsp3

VendorProductVersionCPE
applequicktime*cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*
applequicktime3.0cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*
applequicktime4.1.2cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*
applequicktime5.0cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*
applequicktime5.0.1cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*
applequicktime5.0.2cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*
applequicktime6.0cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*
applequicktime6.0.0cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*
applequicktime6.0.1cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*
applequicktime6.0.2cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	quicktime	*	cpe:2.3:a:apple:quicktime::::::::
apple	quicktime	3.0	cpe:2.3:a:apple:quicktime:3.0:::::::*
apple	quicktime	4.1.2	cpe:2.3:a:apple:quicktime:4.1.2:::::::*
apple	quicktime	5.0	cpe:2.3:a:apple:quicktime:5.0:::::::*
apple	quicktime	5.0.1	cpe:2.3:a:apple:quicktime:5.0.1:::::::*
apple	quicktime	5.0.2	cpe:2.3:a:apple:quicktime:5.0.2:::::::*
apple	quicktime	6.0	cpe:2.3:a:apple:quicktime:6.0:::::::*
apple	quicktime	6.0.0	cpe:2.3:a:apple:quicktime:6.0.0:::::::*
apple	quicktime	6.0.1	cpe:2.3:a:apple:quicktime:6.0.1:::::::*
apple	quicktime	6.0.2	cpe:2.3:a:apple:quicktime:6.0.2:::::::*