Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveAppleCVE-2015-3668
HistoryJul 03, 2015 - 1:59 a.m.

CVE-2015-3668

2015-07-0301:59:26
CWE-119
apple
web.nvd.nist.gov
59
cve-2015-3668
qt media foundation
apple quicktime
remote attack
arbitrary code execution
denial of service
memory corruption

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.2

Confidence

High

EPSS

0.527

Percentile

97.7%

JSON

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3667.

Affected configurations

Nvd
Node
applemac_os_xRange≤10.10.3
Node
applequicktimeRange≤7.7.6
VendorProductVersionCPE
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
applequicktime*cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*

Related

prion 6
cvelist 6
nvd 6
cve 5
kaspersky 1
nessus 4
securityvulns 4
checkpoint_advisories 2
zdi 4
talos 1
openvas 1
prion
prion
Memory corruption
2015-07-03 01:59:00
Memory corruption
2015-07-03 01:59:00
Memory corruption
2015-07-03 01:59:00
cvelist
cvelist
CVE-2015-3667
2015-07-03 01:00:00
CVE-2015-3666
2015-07-03 01:00:00
CVE-2015-3668
2015-07-03 01:00:00
nvd
nvd
CVE-2015-3668
2015-07-03 01:59:26
CVE-2015-3661
2015-07-03 01:59:20
CVE-2015-3663
2015-07-03 01:59:22
cve
cve
CVE-2015-3666
2015-07-03 01:59:24
CVE-2015-3667
2015-07-03 01:59:25
CVE-2015-3662
2015-07-03 01:59:21
kaspersky
kaspersky
KLA10621 Multiple vulnerabilities in Apple QuickTime
2015-06-30 00:00:00
nessus
nessus
Apple QuickTime < 7.7.7 Multiple Vulnerabilities (Windows)
2015-07-03 00:00:00
Apple QuickTime < 7.7.7 Multiple Vulnerabilities
2016-04-20 00:00:00
Mac OS X Multiple Vulnerabilities (Security Update 2015-005) (GHOST) (Logjam)
2015-07-01 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-06-30-5 QuickTime 7.7.7
2015-07-05 00:00:00
Apple QuickTime multiple security vulnerabilities
2015-07-05 00:00:00
Apple Mac OS X / EFI multiple security vulnerabilities
2015-07-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Apple QuickTime traf Atom Out-Of-Bounds Access (CVE-2015-3668)
2015-10-06 00:00:00
Apple QuickTime MP4 Absent stbl Box Memory Corruption (CVE-2015-3667)
2016-01-18 00:00:00
zdi
zdi
Apple QuickTime GIF Out-Of-Bounds Write Remote Code Execution Vulnerability
2015-07-01 00:00:00
Apple QuickTime code Atom Use-After-Free Remote Code Execution Vulnerability
2015-07-01 00:00:00
Apple QuickTime SGI Parsing Remote Code Execution Vulnerability
2015-07-01 00:00:00
talos
talos
Apple Quicktime Corrupt stbl Atom Remote Code Execution Vulnerability
2015-06-30 00:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-01 (Jul 2015)
2015-07-10 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.2

Confidence

High

EPSS

0.527

Percentile

97.7%

JSON
Related for CVE-2015-3668
prion6cvelist6nvd6cve5kaspersky1nessus4securityvulns4checkpoint_advisories2zdi4talos1openvas1