Lucene search

K
cve[email protected]CVE-2015-3668
HistoryJul 03, 2015 - 1:59 a.m.

CVE-2015-3668

2015-07-0301:59:26
CWE-119
web.nvd.nist.gov
50
cve-2015-3668
qt media foundation
apple quicktime
remote attack
arbitrary code execution
denial of service
memory corruption

5.2 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.516 Medium

EPSS

Percentile

97.6%

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3667.

Affected configurations

NVD
Node
applemac_os_xRange10.10.3
Node
applequicktimeRange7.7.6
CPENameOperatorVersion
apple:mac_os_xapple mac os xle10.10.3

5.2 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.516 Medium

EPSS

Percentile

97.6%