Lucene search

[email protected]NVD:CVE-2012-3753

HistoryNov 09, 2012 - 7:55 p.m.

CVE-2012-3753

2012-11-0919:55:01

CWE-119

[email protected]

web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.972 High

EPSS

Percentile

99.8%

JSON

Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type.

Affected configurations

NVD

Node

applequicktimeRange≤7.7.2

applequicktimeMatch3.0

applequicktimeMatch4.1.2

applequicktimeMatch5.0

applequicktimeMatch5.0.1

applequicktimeMatch5.0.2

applequicktimeMatch6.0

applequicktimeMatch6.0.0

applequicktimeMatch6.0.1

applequicktimeMatch6.0.2

applequicktimeMatch6.1

applequicktimeMatch6.1.1

applequicktimeMatch6.2.0

applequicktimeMatch6.3.0

applequicktimeMatch6.4.0

applequicktimeMatch6.5

applequicktimeMatch6.5.0

applequicktimeMatch6.5.1

applequicktimeMatch6.5.2

applequicktimeMatch7.0.0

applequicktimeMatch7.0.1

applequicktimeMatch7.0.2

applequicktimeMatch7.0.3

applequicktimeMatch7.0.4

applequicktimeMatch7.1.0

applequicktimeMatch7.1.1

applequicktimeMatch7.1.2

applequicktimeMatch7.1.3

applequicktimeMatch7.1.4

applequicktimeMatch7.1.5

applequicktimeMatch7.1.6

applequicktimeMatch7.2.0

applequicktimeMatch7.2.1

applequicktimeMatch7.3.0

applequicktimeMatch7.3.1

applequicktimeMatch7.3.1.70

applequicktimeMatch7.4.0

applequicktimeMatch7.4.1

applequicktimeMatch7.4.5

applequicktimeMatch7.5.0

applequicktimeMatch7.5.5

applequicktimeMatch7.6.0

applequicktimeMatch7.6.1

applequicktimeMatch7.6.2

applequicktimeMatch7.6.5

applequicktimeMatch7.6.6

applequicktimeMatch7.6.7

applequicktimeMatch7.6.8

applequicktimeMatch7.6.9

applequicktimeMatch7.7.0

applequicktimeMatch7.7.1

References

lists.apple.com/archives/security-announce/2012/Nov/msg00002.html

packetstormsecurity.com/files/118421/Apple-QuickTime-7.7.2-MIME-Type-Buffer-Overflow.html

secunia.com/advisories/51226

support.apple.com/kb/HT5581

exchange.xforce.ibmcloud.com/vulnerabilities/79900

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15947

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.972 High

EPSS

Percentile

99.8%

JSON

Related for NVD:CVE-2012-3753

checkpoint_advisories2 saint4 cve1 prion1 packetstorm1 cvelist1 seebug1 openvas2 securityvulns2 nessus3 threatpost1