Lucene search

K
cve[email protected]CVE-2011-3250
HistoryOct 28, 2011 - 2:49 a.m.

CVE-2011-3250

2011-10-2802:49:00
CWE-189
web.nvd.nist.gov
100
cve-2011-3250
apple quicktime
integer overflow
arbitrary code execution
denial of service
jpeg2000
nvd

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.794 High

EPSS

Percentile

98.2%

Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with JPEG2000 encoding.

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.794 High

EPSS

Percentile

98.2%