Lucene search
AppleCVE-2012-0666HistoryMay 16, 2012 - 10:12 a.m.
CVE-2012-0666
2012-05-1610:12:57
CWE-119
apple
web.nvd.nist.gov
34
cve-2012-0666
buffer overflow
apple quicktime
remote code execution
denial of service
nvd
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.146
Percentile
95.8%
Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTMovie object.
Affected configurations
Node
applequicktimeRangeβ€7.7.1
ORapplequicktimeMatch3.0
ORapplequicktimeMatch4.1.2
ORapplequicktimeMatch5.0
ORapplequicktimeMatch5.0.1
ORapplequicktimeMatch5.0.2
ORapplequicktimeMatch6.0
ORapplequicktimeMatch6.0.0
ORapplequicktimeMatch6.0.1
ORapplequicktimeMatch6.0.2
ORapplequicktimeMatch6.1
ORapplequicktimeMatch6.1.0
ORapplequicktimeMatch6.1.1
ORapplequicktimeMatch6.2.0
ORapplequicktimeMatch6.3.0
ORapplequicktimeMatch6.4.0
ORapplequicktimeMatch6.5
ORapplequicktimeMatch6.5.0
ORapplequicktimeMatch6.5.1
ORapplequicktimeMatch6.5.2
ORapplequicktimeMatch7.0
ORapplequicktimeMatch7.0.0
ORapplequicktimeMatch7.0.1
ORapplequicktimeMatch7.0.2
ORapplequicktimeMatch7.0.3
ORapplequicktimeMatch7.0.4
ORapplequicktimeMatch7.1
ORapplequicktimeMatch7.1.0
ORapplequicktimeMatch7.1.1
ORapplequicktimeMatch7.1.2
ORapplequicktimeMatch7.1.3
ORapplequicktimeMatch7.1.4
ORapplequicktimeMatch7.1.5
ORapplequicktimeMatch7.1.6
ORapplequicktimeMatch7.2
ORapplequicktimeMatch7.2.0
ORapplequicktimeMatch7.2.1
ORapplequicktimeMatch7.3
ORapplequicktimeMatch7.3.0
ORapplequicktimeMatch7.3.1
ORapplequicktimeMatch7.3.1.70
ORapplequicktimeMatch7.4
ORapplequicktimeMatch7.4.0
ORapplequicktimeMatch7.4.1
ORapplequicktimeMatch7.4.5
ORapplequicktimeMatch7.5.0
ORapplequicktimeMatch7.5.5
ORapplequicktimeMatch7.6.0
ORapplequicktimeMatch7.6.1
ORapplequicktimeMatch7.6.2
ORapplequicktimeMatch7.6.5
ORapplequicktimeMatch7.6.6
ORapplequicktimeMatch7.6.7
ORapplequicktimeMatch7.6.8
ORapplequicktimeMatch7.6.9
ORapplequicktimeMatch7.7.0
ORapplequicktimeMatch7.60.92.0
ORapplequicktimeMatch7.62.14.0
ORapplequicktimeMatch7.64.17.73
ORapplequicktimeMatch7.65.17.80
ORapplequicktimeMatch7.66.71.0
ORapplequicktimeMatch7.67.75.0
ORapplequicktimeMatch7.68.75.0
ORapplequicktimeMatch7.69.80.9
microsoftwindows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | quicktime | * | cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:* |
| apple | quicktime | 3.0 | cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:* |
| apple | quicktime | 4.1.2 | cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:* |
| apple | quicktime | 5.0 | cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:* |
| apple | quicktime | 5.0.1 | cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:* |
| apple | quicktime | 5.0.2 | cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:* |
| apple | quicktime | 6.0 | cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:* |
| apple | quicktime | 6.0.0 | cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:* |
| apple | quicktime | 6.0.1 | cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:* |
| apple | quicktime | 6.0.2 | cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:* |
Related
checkpoint_advisories
checkpoint_advisories
Apple QuickTime Plugin SetLanguage Buffer Overflow (CVE-2012-0666)
2012-10-14 00:00:00
cvelist
cvelist
CVE-2012-0666
2012-05-16 01:00:00
securityvulns
securityvulns
ZDI-12-125: Apple Quicktime QTPlugin SetLanguage Remote Code Execution Vulnerability
2012-07-16 00:00:00
Apple QuickTime multiple security vulnerabilities
2012-08-27 00:00:00
APPLE-SA-2012-05-15-1 QuickTime 7.7.2
2012-05-21 00:00:00
saint
saint
Apple QuickTime SetLanguage Overflow
2012-07-25 00:00:00
Apple QuickTime SetLanguage Overflow
2012-07-25 00:00:00
Apple QuickTime SetLanguage Overflow
2012-07-25 00:00:00
prion
prion
Stack overflow
2012-05-16 10:12:00
zdi
zdi
Apple Quicktime QTPlugin SetLanguage Remote Code Execution Vulnerability
2012-07-12 00:00:00
nvd
nvd
CVE-2012-0666
2012-05-16 10:12:57
seebug
seebug
Apple QuickTime 7.7.2δΉεηζ¬ε€δΈͺθΏη¨δ»»ζ代η ζ§θ‘ζΌζ΄
2012-05-17 00:00:00
nessus
nessus
QuickTime < 7.7.2 Multiple Vulnerabilities
2012-05-18 00:00:00
QuickTime < 7.7.2 Multiple Vulnerabilities
2012-05-18 00:00:00
QuickTime < 7.7.2 Multiple Vulnerabilities (Windows)
2012-05-16 00:00:00
openvas
openvas
Apple QuickTime Multiple Vulnerabilities - (Windows)
2012-05-18 00:00:00
Apple QuickTime Multiple Vulnerabilities - Windows
2012-05-18 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.146
Percentile
95.8%
Related for CVE-2012-0666