Quicktime@* Security Vulnerabilities and Issues — Page 2 of Quicktime@* CVE List

Lucene search

AppleQuicktime*

190 matches found

CVE•added 2015/07/03 1:59 a.m.•53 views

CVE-2015-3669

QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3664 and CVE-2015-3665.

6.8CVSS7.5AI score0.02022EPSS

CVE•added 2009/09/10 9:30 p.m.•52 views

CVE-2009-2798

Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file.

9.3CVSS7.7AI score0.07937EPSS

CVE•added 2011/08/04 2:45 a.m.•52 views

CVE-2011-0252

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STTS atoms in a QuickTime movie file.

9.3CVSS8.7AI score0.05695EPSS

CVE•added 2015/08/25 1:59 a.m.•52 views

CVE-2015-5785

Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-5786.

6.8CVSS7.8AI score0.01481EPSS

CVE•added 2016/01/09 2:59 a.m.•52 views

CVE-2015-7091

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CV...

6.8CVSS7.2AI score0.0456EPSS

CVE•added 2009/01/21 8:30 p.m.•51 views

CVE-2009-0005

Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted H.263 encoded movie file that triggers memory corruption.

9.3CVSS7.6AI score0.04024EPSS

CVE•added 2010/03/31 6:30 p.m.•51 views

CVE-2010-0529

Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a BkPixPat opcode (0x12) containing crafted values that are used in a calculation for memor...

9.3CVSS8.1AI score0.04161EPSS

CVE•added 2011/08/04 2:45 a.m.•51 views

CVE-2011-0246

Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.

9.3CVSS8AI score0.04248EPSS

CVE•added 2011/08/15 9:55 p.m.•51 views

CVE-2011-0256

Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted track run atoms in a QuickTime movie file.

9.3CVSS7.8AI score0.02524EPSS

CVE•added 2014/02/27 1:55 a.m.•51 views

CVE-2014-1247

Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted dref atom in a movie file.

9.3CVSS7.7AI score0.03623EPSS

CVE•added 2015/07/03 1:59 a.m.•51 views

CVE-2015-3665

6.8CVSS7.5AI score0.02022EPSS

CVE•added 2016/01/09 2:59 a.m.•51 views

CVE-2015-7117

6.8CVSS7.1AI score0.0456EPSS

CVE•added 2005/11/05 11:2 a.m.•50 views

CVE-2005-2756

Apple QuickTime before 7.0.3 allows user-assisted attackers to overwrite memory and execute arbitrary code via a crafted PICT file that triggers an overflow during expansion.

5.1CVSS7.2AI score0.02311EPSS

CVE•added 2006/05/12 8:6 p.m.•50 views

CVE-2006-1453

Stack-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file containing malformed font information.

5.1CVSS7.6AI score0.24607EPSS

CVE•added 2008/06/10 6:32 p.m.•50 views

CVE-2008-1583

Heap-based buffer overflow in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PICT image, a different vulnerability than CVE-2008-1581.

6.8CVSS7.7AI score0.1479EPSS

CVE•added 2008/09/11 1:13 a.m.•50 views

CVE-2008-3626

The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted m...

6.8CVSS7.5AI score0.04008EPSS

CVE•added 2009/06/02 6:30 p.m.•50 views

CVE-2009-0951

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC compression file.

9.3CVSS7.9AI score0.21519EPSS

CVE•added 2009/09/10 9:30 p.m.•50 views

CVE-2009-2203

Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG-4 video file.

9.3CVSS7.7AI score0.07937EPSS

CVE•added 2010/08/16 6:39 p.m.•50 views

CVE-2010-1799

Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

9.3CVSS8AI score0.67678EPSS

CVE•added 2011/03/23 2:0 a.m.•50 views

CVE-2011-0186

QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG2000 image.

4.3CVSS6.8AI score0.00957EPSS

CVE•added 2011/06/24 8:55 p.m.•50 views

CVE-2011-0209

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RIFF WAV file.

6.8CVSS6.2AI score0.01404EPSS

CVE•added 2011/06/24 8:55 p.m.•50 views

CVE-2011-0211

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

6.8CVSS6.2AI score0.01404EPSS

CVE•added 2012/11/09 7:55 p.m.•50 views

CVE-2012-3755

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Targa image.

9.3CVSS7.8AI score0.44525EPSS

CVE•added 2012/11/09 7:55 p.m.•50 views

CVE-2012-3757

Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file.

9.3CVSS7.7AI score0.07138EPSS

CVE•added 2014/02/27 1:55 a.m.•50 views

CVE-2014-1249

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PSD image.

9.3CVSS7.7AI score0.0512EPSS

CVE•added 2015/07/03 1:59 a.m.•50 views

CVE-2015-3662

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3663, CVE-2015-3666, ...

6.8CVSS5.2AI score0.03642EPSS

CVE•added 2015/07/03 1:59 a.m.•50 views

CVE-2015-3663

6.8CVSS5.2AI score0.03642EPSS

CVE•added 2015/08/25 1:59 a.m.•50 views

CVE-2015-5786

6.8CVSS7.8AI score0.01481EPSS

CVE•added 2016/01/09 2:59 a.m.•50 views

CVE-2015-7092

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted TXXX frame within an ID3 tag in MP3 data in a movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-201...

6.8CVSS7AI score0.0456EPSS

CVE•added 2005/11/05 11:2 a.m.•49 views

CVE-2005-2754

Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with "Improper movie attributes."

5.1CVSS7.3AI score0.01442EPSS

CVE•added 2005/11/05 11:2 a.m.•49 views

CVE-2005-2755

Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service (crash) via a crafted file with a missing movie attribute, which leads to a null dereference.

2.6CVSS5.9AI score0.01388EPSS

CVE•added 2006/09/12 11:7 p.m.•49 views

CVE-2006-4384

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64 chunk in a FLIC (FLC) movie.

5.1CVSS7.5AI score0.42023EPSS

CVE•added 2008/09/11 1:13 a.m.•49 views

CVE-2008-3624

Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted panorama atoms.

6.8CVSS7.9AI score0.02811EPSS

CVE•added 2009/01/21 8:30 p.m.•49 views

CVE-2009-0007

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms.

9.3CVSS7.9AI score0.35592EPSS

CVE•added 2009/09/10 9:30 p.m.•49 views

CVE-2009-2799

Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264 movie file.

9.3CVSS7.7AI score0.07937EPSS

CVE•added 2010/11/16 10:0 p.m.•49 views

CVE-2010-3789

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted AVI file.

6.8CVSS9.2AI score0.01058EPSS

CVE•added 2010/12/09 8:0 p.m.•49 views

CVE-2010-3800

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file.

9.3CVSS7.7AI score0.08EPSS

CVE•added 2011/08/04 2:45 a.m.•49 views

CVE-2011-0250

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSS atoms in a QuickTime movie file.

9.3CVSS8.7AI score0.05695EPSS

CVE•added 2013/05/24 4:43 p.m.•49 views

CVE-2013-0987

Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QTIF file.

9.3CVSS7.5AI score0.04596EPSS

CVE•added 2016/01/09 2:59 a.m.•49 views

CVE-2015-7090

6.8CVSS7.1AI score0.0456EPSS

CVE•added 2009/01/21 8:30 p.m.•48 views

CVE-2009-0001

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL.

9.3CVSS9.2AI score0.06199EPSS

CVE•added 2010/03/31 6:30 p.m.•48 views

CVE-2010-0528

Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length val...

9.3CVSS7.9AI score0.03156EPSS

CVE•added 2011/08/04 2:45 a.m.•48 views

CVE-2011-0248

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTL file.

9.3CVSS7.9AI score0.0396EPSS

CVE•added 2011/10/28 2:49 a.m.•48 views

CVE-2011-3251

Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted TKHD atoms in a QuickTime movie file.

9.3CVSS9.3AI score0.02661EPSS

CVE•added 2012/05/16 10:12 a.m.•48 views

CVE-2012-0668

Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding.

9.3CVSS7.7AI score0.03233EPSS

CVE•added 2012/11/09 7:55 p.m.•48 views

CVE-2012-3751

Use-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with a crafted qtactivex parameter in an OBJECT element.

9.3CVSS7.5AI score0.05303EPSS

CVE•added 2013/05/24 4:43 p.m.•48 views

CVE-2013-1022

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted mvhd atoms in a movie file.

9.3CVSS7.8AI score0.05798EPSS

CVE•added 2014/02/27 1:55 a.m.•48 views

CVE-2014-1248

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ldat atom in a movie file.

9.3CVSS7.7AI score0.0512EPSS

CVE•added 2015/07/03 2:0 a.m.•48 views

CVE-2015-3713

QuickTime in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted movie file.

6.8CVSS5.2AI score0.01395EPSS

CVE•added 2006/09/12 11:7 p.m.•47 views

CVE-2006-4381

Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie.

5.1CVSS7.3AI score0.09146EPSS

Total number of security vulnerabilities190