Lucene search

K
cve[email protected]CVE-2014-1247
HistoryFeb 27, 2014 - 1:55 a.m.

CVE-2014-1247

2014-02-2701:55:00
CWE-119
web.nvd.nist.gov
31
apple quicktime
cve-2014-1247
remote code execution
memory corruption
denial of service

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.033 Low

EPSS

Percentile

91.3%

Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted dref atom in a movie file.

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.033 Low

EPSS

Percentile

91.3%