Quicktime Security Vulnerabilities and Issues — Quicktime CVE List

Lucene search

AppleQuicktime

246 matches found

CVE•added 2012/05/16 10:12 a.m.•169 views

CVE-2012-0663

Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file.

9.3CVSS7.6AI score0.68246EPSS

CVE•added 2012/11/09 7:55 p.m.•153 views

CVE-2012-3753

Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type.

9.3CVSS7.7AI score0.78056EPSS

CVE•added 2012/11/09 7:55 p.m.•151 views

CVE-2012-3754

Use-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

9.3CVSS7.7AI score0.05303EPSS

CVE•added 2012/11/09 7:55 p.m.•135 views

CVE-2012-3756

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rnet box in an MP4 movie file.

9.3CVSS7.7AI score0.08336EPSS

CVE•added 2012/05/16 10:12 a.m.•129 views

CVE-2012-0671

Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .pict file.

9.3CVSS7.7AI score0.07508EPSS

CVE•added 2013/05/24 4:43 p.m.•129 views

CVE-2013-0986

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted enof atoms in a movie file.

9.3CVSS7.7AI score0.03627EPSS

CVE•added 2012/11/09 7:55 p.m.•123 views

CVE-2012-3752

Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime TeXML file.

9.3CVSS7.6AI score0.79074EPSS

CVE•added 2011/10/28 2:49 a.m.•122 views

CVE-2011-3250

Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with JPEG2000 encoding.

9.3CVSS7.3AI score0.06419EPSS

CVE•added 2013/05/24 4:43 p.m.•122 views

CVE-2013-1020

Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JPEG data in a movie file.

9.3CVSS7.5AI score0.0495EPSS

CVE•added 2012/05/16 10:12 a.m.•117 views

CVE-2012-0664

Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted text track in a movie file.

9.3CVSS7.9AI score0.05677EPSS

CVE•added 2013/05/24 4:43 p.m.•117 views

CVE-2013-1017

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.

9.3CVSS7.7AI score0.82374EPSS

CVE•added 2012/05/16 10:12 a.m.•116 views

CVE-2012-0667

Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTVR movie file.

9.3CVSS7.4AI score0.04315EPSS

CVE•added 2015/08/17 12:0 a.m.•98 views

CVE-2015-3791

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-37...

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2015/08/17 12:0 a.m.•78 views

CVE-2015-3792

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2015/08/16 11:59 p.m.•76 views

CVE-2015-3788

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2015/07/03 1:59 a.m.•74 views

CVE-2015-3668

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, ...

6.8CVSS5.2AI score0.03642EPSS

CVE•added 2015/07/03 1:59 a.m.•68 views

CVE-2015-3666

6.8CVSS5.2AI score0.03642EPSS

CVE•added 2015/07/03 1:59 a.m.•67 views

CVE-2015-3661

6.8CVSS5.2AI score0.03642EPSS

CVE•added 2016/01/09 2:59 a.m.•65 views

CVE-2015-7087

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CV...

6.8CVSS7.1AI score0.0456EPSS

CVE•added 2015/08/16 11:59 p.m.•63 views

CVE-2015-3779

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-37...

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2015/07/03 1:59 a.m.•62 views

CVE-2015-3667

6.8CVSS5.2AI score0.03642EPSS

CVE•added 2015/08/17 12:1 a.m.•62 views

CVE-2015-5779

7.5CVSS9.3AI score0.0324EPSS

CVE•added 2016/01/09 2:59 a.m.•62 views

CVE-2015-7089

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7090, CVE-2015-7091, CV...

6.8CVSS7.1AI score0.0456EPSS

CVE•added 2014/02/27 1:55 a.m.•61 views

CVE-2014-1246

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ftab atom in a movie file.

9.3CVSS7.7AI score0.0512EPSS

CVE•added 2005/12/08 11:3 a.m.•60 views

CVE-2005-4092

Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a .mov file with (1) a Movie Resource atom with a large size value, or (2) an stsd atom w...

7.5CVSS7.6AI score

CVE•added 2006/09/25 12:7 a.m.•60 views

CVE-2006-4965

Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain. NOTE: as of 20070...

5CVSS6.8AI score0.07708EPSS

CVE•added 2010/11/16 10:0 p.m.•60 views

CVE-2010-3788

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of JP2 image data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 file.

6.8CVSS9AI score0.01058EPSS

CVE•added 2010/11/16 10:0 p.m.•60 views

CVE-2010-3792

Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG movie file.

6.8CVSS9AI score0.01058EPSS

CVE•added 2015/08/16 11:59 p.m.•60 views

CVE-2015-3765

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-37...

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2015/08/17 12:0 a.m.•60 views

CVE-2015-5751

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2011/03/23 2:0 a.m.•57 views

CVE-2011-0187

The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect.

4.3CVSS5.7AI score0.00598EPSS

CVE•added 2011/10/28 2:49 a.m.•57 views

CVE-2011-3249

Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with FLC encoding.

9.3CVSS7.4AI score0.04024EPSS

CVE•added 2014/02/27 1:55 a.m.•57 views

CVE-2014-1250

Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted ttfo element in a movie file.

9.3CVSS7.5AI score0.03623EPSS

CVE•added 2016/01/09 2:59 a.m.•57 views

CVE-2015-7085

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CV...

6.8CVSS7.1AI score0.0456EPSS

CVE•added 2006/05/12 8:6 p.m.•56 views

CVE-2006-1461

Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash (SWF) file.

5.1CVSS7.4AI score0.11187EPSS

CVE•added 2010/11/16 10:0 p.m.•56 views

CVE-2010-3790

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file that causes an image sample transformation to scale a sprite outside a buffer boundary.

6.8CVSS7.9AI score0.04226EPSS

CVE•added 2013/09/16 1:2 p.m.•56 views

CVE-2013-1032

QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted idsc atom in a QuickTime movie file.

6.8CVSS7.7AI score0.0202EPSS

CVE•added 2017/07/07 1:29 p.m.•56 views

CVE-2017-2218

Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

7.8CVSS7.7AI score0.00206EPSS

CVE•added 2007/01/30 6:28 p.m.•55 views

CVE-2007-0588

The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption ...

7.1CVSS8.2AI score0.35585EPSS

CVE•added 2007/09/24 12:17 a.m.•55 views

CVE-2007-5045

Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute arbitrary commands via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter containing the F...

9.3CVSS8.1AI score0.49726EPSS

CVE•added 2008/01/11 2:46 a.m.•55 views

CVE-2008-0234

Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message.

9.3CVSS7.5AI score0.4414EPSS

CVE•added 2010/08/31 8:0 p.m.•55 views

CVE-2010-1818

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.

9.3CVSS7.3AI score0.76511EPSS

CVE•added 2011/08/04 2:45 a.m.•55 views

CVE-2011-0251

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSZ atoms in a QuickTime movie file.

9.3CVSS8.7AI score0.05695EPSS

CVE•added 2014/02/27 1:55 a.m.•55 views

CVE-2014-1243

Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted track list in a movie file.

9.3CVSS7.6AI score0.03917EPSS

CVE•added 2014/02/27 1:55 a.m.•55 views

CVE-2014-1244

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

9.3CVSS7.8AI score0.04028EPSS

CVE•added 2016/01/09 2:59 a.m.•55 views

CVE-2015-7088

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CV...

6.8CVSS7.1AI score0.0456EPSS

CVE•added 2007/12/15 1:46 a.m.•54 views

CVE-2007-4707

Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts via a crafted QuickTime movie.

9.3CVSS7.5AI score0.04956EPSS

CVE•added 2007/11/29 1:46 a.m.•54 views

CVE-2007-6166

Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.

9.3CVSS7.6AI score0.83919EPSS

CVE•added 2008/09/11 1:13 a.m.•54 views

CVE-2008-3628

Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, related to an "invalid pointer issue."

9.3CVSS7.5AI score0.04937EPSS

CVE•added 2010/11/16 10:0 p.m.•54 views

CVE-2010-3791

Buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG movie file.

6.8CVSS9.2AI score0.01127EPSS

Total number of security vulnerabilities246