Lucene search

K
cve[email protected]CVE-2012-3754
HistoryNov 09, 2012 - 7:55 p.m.

CVE-2012-3754

2012-11-0919:55:01
CWE-399
web.nvd.nist.gov
128
cve-2012-3754
use-after-free
apple quicktime
activex control
remote code execution
denial of service
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

Use-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

Affected configurations

NVD
Node
applequicktimeRange≀7.7.2
OR
applequicktimeMatch3.0
OR
applequicktimeMatch4.1.2
OR
applequicktimeMatch5.0
OR
applequicktimeMatch5.0.1
OR
applequicktimeMatch5.0.2
OR
applequicktimeMatch6.0
OR
applequicktimeMatch6.0.0
OR
applequicktimeMatch6.0.1
OR
applequicktimeMatch6.0.2
OR
applequicktimeMatch6.1
OR
applequicktimeMatch6.1.1
OR
applequicktimeMatch6.2.0
OR
applequicktimeMatch6.3.0
OR
applequicktimeMatch6.4.0
OR
applequicktimeMatch6.5
OR
applequicktimeMatch6.5.0
OR
applequicktimeMatch6.5.1
OR
applequicktimeMatch6.5.2
OR
applequicktimeMatch7.0.0
OR
applequicktimeMatch7.0.1
OR
applequicktimeMatch7.0.2
OR
applequicktimeMatch7.0.3
OR
applequicktimeMatch7.0.4
OR
applequicktimeMatch7.1.0
OR
applequicktimeMatch7.1.1
OR
applequicktimeMatch7.1.2
OR
applequicktimeMatch7.1.3
OR
applequicktimeMatch7.1.4
OR
applequicktimeMatch7.1.5
OR
applequicktimeMatch7.1.6
OR
applequicktimeMatch7.2.0
OR
applequicktimeMatch7.2.1
OR
applequicktimeMatch7.3.0
OR
applequicktimeMatch7.3.1
OR
applequicktimeMatch7.3.1.70
OR
applequicktimeMatch7.4.0
OR
applequicktimeMatch7.4.1
OR
applequicktimeMatch7.4.5
OR
applequicktimeMatch7.5.0
OR
applequicktimeMatch7.5.5
OR
applequicktimeMatch7.6.0
OR
applequicktimeMatch7.6.1
OR
applequicktimeMatch7.6.2
OR
applequicktimeMatch7.6.5
OR
applequicktimeMatch7.6.6
OR
applequicktimeMatch7.6.7
OR
applequicktimeMatch7.6.8
OR
applequicktimeMatch7.6.9
OR
applequicktimeMatch7.7.0
OR
applequicktimeMatch7.7.1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%