CVE-2012-0659

2012-05-1103:49:00

CWE-189

[email protected]

web.nvd.nist.gov

104

cve-2012-0659

integer overflow

quicktime

apple

mac os x

remote attackers

arbitrary code

denial of service

application crash

mpeg file

7.6 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.595 Medium

EPSS

Percentile

97.8%

JSON

Integer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG file.

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.5.8
apple:mac_os_xapple mac os xeq10.4.3
apple:mac_os_xapple mac os xeq10.6.8
apple:mac_os_xapple mac os xeq10.2.5
apple:mac_os_xapple mac os xeq10.6.7
apple:mac_os_xapple mac os xeq10.2.7
apple:mac_os_xapple mac os xeq10.0.2
apple:mac_os_xapple mac os xeq10.2.8
apple:mac_os_xapple mac os xeq10.2.1
apple:mac_os_xapple mac os xeq10.5.6

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.5.8
apple:mac_os_x	apple mac os x	eq	10.4.3
apple:mac_os_x	apple mac os x	eq	10.6.8
apple:mac_os_x	apple mac os x	eq	10.2.5
apple:mac_os_x	apple mac os x	eq	10.6.7
apple:mac_os_x	apple mac os x	eq	10.2.7
apple:mac_os_x	apple mac os x	eq	10.0.2
apple:mac_os_x	apple mac os x	eq	10.2.8
apple:mac_os_x	apple mac os x	eq	10.2.1
apple:mac_os_x	apple mac os x	eq	10.5.6