Lucene search
HistoryMay 16, 2012 - 10:12 a.m.
CVE-2012-0666
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
High
EPSS
0.146
Percentile
95.8%
Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTMovie object.
Affected configurations
Node
applequicktimeRangeβ€7.7.1
ORapplequicktimeMatch3.0
ORapplequicktimeMatch4.1.2
ORapplequicktimeMatch5.0
ORapplequicktimeMatch5.0.1
ORapplequicktimeMatch5.0.2
ORapplequicktimeMatch6.0
ORapplequicktimeMatch6.0.0
ORapplequicktimeMatch6.0.1
ORapplequicktimeMatch6.0.2
ORapplequicktimeMatch6.1
ORapplequicktimeMatch6.1.0
ORapplequicktimeMatch6.1.1
ORapplequicktimeMatch6.2.0
ORapplequicktimeMatch6.3.0
ORapplequicktimeMatch6.4.0
ORapplequicktimeMatch6.5
ORapplequicktimeMatch6.5.0
ORapplequicktimeMatch6.5.1
ORapplequicktimeMatch6.5.2
ORapplequicktimeMatch7.0
ORapplequicktimeMatch7.0.0
ORapplequicktimeMatch7.0.1
ORapplequicktimeMatch7.0.2
ORapplequicktimeMatch7.0.3
ORapplequicktimeMatch7.0.4
ORapplequicktimeMatch7.1
ORapplequicktimeMatch7.1.0
ORapplequicktimeMatch7.1.1
ORapplequicktimeMatch7.1.2
ORapplequicktimeMatch7.1.3
ORapplequicktimeMatch7.1.4
ORapplequicktimeMatch7.1.5
ORapplequicktimeMatch7.1.6
ORapplequicktimeMatch7.2
ORapplequicktimeMatch7.2.0
ORapplequicktimeMatch7.2.1
ORapplequicktimeMatch7.3
ORapplequicktimeMatch7.3.0
ORapplequicktimeMatch7.3.1
ORapplequicktimeMatch7.3.1.70
ORapplequicktimeMatch7.4
ORapplequicktimeMatch7.4.0
ORapplequicktimeMatch7.4.1
ORapplequicktimeMatch7.4.5
ORapplequicktimeMatch7.5.0
ORapplequicktimeMatch7.5.5
ORapplequicktimeMatch7.6.0
ORapplequicktimeMatch7.6.1
ORapplequicktimeMatch7.6.2
ORapplequicktimeMatch7.6.5
ORapplequicktimeMatch7.6.6
ORapplequicktimeMatch7.6.7
ORapplequicktimeMatch7.6.8
ORapplequicktimeMatch7.6.9
ORapplequicktimeMatch7.7.0
ORapplequicktimeMatch7.60.92.0
ORapplequicktimeMatch7.62.14.0
ORapplequicktimeMatch7.64.17.73
ORapplequicktimeMatch7.65.17.80
ORapplequicktimeMatch7.66.71.0
ORapplequicktimeMatch7.67.75.0
ORapplequicktimeMatch7.68.75.0
ORapplequicktimeMatch7.69.80.9
microsoftwindows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | quicktime | * | cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:* |
| apple | quicktime | 3.0 | cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:* |
| apple | quicktime | 4.1.2 | cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:* |
| apple | quicktime | 5.0 | cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:* |
| apple | quicktime | 5.0.1 | cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:* |
| apple | quicktime | 5.0.2 | cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:* |
| apple | quicktime | 6.0 | cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:* |
| apple | quicktime | 6.0.0 | cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:* |
| apple | quicktime | 6.0.1 | cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:* |
| apple | quicktime | 6.0.2 | cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:* |
Related
checkpoint_advisories
checkpoint_advisories
Apple QuickTime Plugin SetLanguage Buffer Overflow (CVE-2012-0666)
2012-10-14 00:00:00
cvelist
cvelist
CVE-2012-0666
2012-05-16 01:00:00
saint
saint
Apple QuickTime SetLanguage Overflow
2012-07-25 00:00:00
Apple QuickTime SetLanguage Overflow
2012-07-25 00:00:00
Apple QuickTime SetLanguage Overflow
2012-07-25 00:00:00
securityvulns
securityvulns
ZDI-12-125: Apple Quicktime QTPlugin SetLanguage Remote Code Execution Vulnerability
2012-07-16 00:00:00
Apple QuickTime multiple security vulnerabilities
2012-08-27 00:00:00
APPLE-SA-2012-05-15-1 QuickTime 7.7.2
2012-05-21 00:00:00
cve
cve
CVE-2012-0666
2012-05-16 10:12:57
prion
prion
Stack overflow
2012-05-16 10:12:00
zdi
zdi
Apple Quicktime QTPlugin SetLanguage Remote Code Execution Vulnerability
2012-07-12 00:00:00
seebug
seebug
Apple QuickTime 7.7.2δΉεηζ¬ε€δΈͺθΏη¨δ»»ζ代η ζ§θ‘ζΌζ΄
2012-05-17 00:00:00
nessus
nessus
QuickTime < 7.7.2 Multiple Vulnerabilities
2012-05-18 00:00:00
QuickTime < 7.7.2 Multiple Vulnerabilities
2012-05-18 00:00:00
QuickTime < 7.7.2 Multiple Vulnerabilities (Windows)
2012-05-16 00:00:00
openvas
openvas
Apple QuickTime Multiple Vulnerabilities - (Windows)
2012-05-18 00:00:00
Apple QuickTime Multiple Vulnerabilities - Windows
2012-05-18 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
High
EPSS
0.146
Percentile
95.8%
Related for NVD:CVE-2012-0666