Lucene search

K
cve[email protected]CVE-2015-3765
HistoryAug 16, 2015 - 11:59 p.m.

CVE-2015-3765

2015-08-1623:59:38
CWE-119
web.nvd.nist.gov
38
cve-2015-3765
quicktime 7
apple os x
remote attack
memory corruption
denial of service
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

9.3

Confidence

High

EPSS

0.516

Percentile

97.6%

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.

Affected configurations

NVD
Node
applequicktimeMatch7.0.0
AND
applemac_os_xRange10.10.4
VendorProductVersionCPE
applequicktime7.0.0cpe:/a:apple:quicktime:7.0.0:::

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

9.3

Confidence

High

EPSS

0.516

Percentile

97.6%