Lucene search

[email protected]CVE-2012-3753

HistoryNov 09, 2012 - 7:55 p.m.

CVE-2012-3753

2012-11-0919:55:01

CWE-119

[email protected]

web.nvd.nist.gov

127

cve-2012-3753

buffer overflow

apple quicktime

remote code execution

dos

crafted mime type

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.972 High

EPSS

Percentile

99.8%

JSON

Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type.

Affected configurations

NVD

Node

applequicktimeRange≤7.7.2

applequicktimeMatch3.0

applequicktimeMatch4.1.2

applequicktimeMatch5.0

applequicktimeMatch5.0.1

applequicktimeMatch5.0.2

applequicktimeMatch6.0

applequicktimeMatch6.0.0

applequicktimeMatch6.0.1

applequicktimeMatch6.0.2

applequicktimeMatch6.1

applequicktimeMatch6.1.1

applequicktimeMatch6.2.0

applequicktimeMatch6.3.0

applequicktimeMatch6.4.0

applequicktimeMatch6.5

applequicktimeMatch6.5.0

applequicktimeMatch6.5.1

applequicktimeMatch6.5.2

applequicktimeMatch7.0.0

applequicktimeMatch7.0.1

applequicktimeMatch7.0.2

applequicktimeMatch7.0.3

applequicktimeMatch7.0.4

applequicktimeMatch7.1.0

applequicktimeMatch7.1.1

applequicktimeMatch7.1.2

applequicktimeMatch7.1.3

applequicktimeMatch7.1.4

applequicktimeMatch7.1.5

applequicktimeMatch7.1.6

applequicktimeMatch7.2.0

applequicktimeMatch7.2.1

applequicktimeMatch7.3.0

applequicktimeMatch7.3.1

applequicktimeMatch7.3.1.70

applequicktimeMatch7.4.0

applequicktimeMatch7.4.1

applequicktimeMatch7.4.5

applequicktimeMatch7.5.0

applequicktimeMatch7.5.5

applequicktimeMatch7.6.0

applequicktimeMatch7.6.1

applequicktimeMatch7.6.2

applequicktimeMatch7.6.5

applequicktimeMatch7.6.6

applequicktimeMatch7.6.7

applequicktimeMatch7.6.8

applequicktimeMatch7.6.9

applequicktimeMatch7.7.0

applequicktimeMatch7.7.1

CPENameOperatorVersion
apple:quicktimeapple quicktimele7.7.2
apple:quicktimeapple quicktimeeq3.0
apple:quicktimeapple quicktimeeq4.1.2
apple:quicktimeapple quicktimeeq5.0
apple:quicktimeapple quicktimeeq5.0.1
apple:quicktimeapple quicktimeeq5.0.2
apple:quicktimeapple quicktimeeq6.0
apple:quicktimeapple quicktimeeq6.0.0
apple:quicktimeapple quicktimeeq6.0.1
apple:quicktimeapple quicktimeeq6.0.2

CPE	Name	Operator	Version
apple:quicktime	apple quicktime	le	7.7.2
apple:quicktime	apple quicktime	eq	3.0
apple:quicktime	apple quicktime	eq	4.1.2
apple:quicktime	apple quicktime	eq	5.0
apple:quicktime	apple quicktime	eq	5.0.1
apple:quicktime	apple quicktime	eq	5.0.2
apple:quicktime	apple quicktime	eq	6.0
apple:quicktime	apple quicktime	eq	6.0.0
apple:quicktime	apple quicktime	eq	6.0.1
apple:quicktime	apple quicktime	eq	6.0.2