Quicktime@7.0.0 Security Vulnerabilities and Issues — Quicktime@7.0.0 CVE List

Lucene search

AppleQuicktime7.0.0

98 matches found

CVE•added 2012/05/16 10:12 a.m.•169 views

CVE-2012-0663

Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file.

9.3CVSS7.6AI score0.68246EPSS

CVE•added 2012/11/09 7:55 p.m.•153 views

CVE-2012-3753

Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type.

9.3CVSS7.7AI score0.78056EPSS

CVE•added 2012/11/09 7:55 p.m.•151 views

CVE-2012-3754

Use-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

9.3CVSS7.7AI score0.05303EPSS

CVE•added 2012/11/09 7:55 p.m.•135 views

CVE-2012-3756

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rnet box in an MP4 movie file.

9.3CVSS7.7AI score0.08336EPSS

CVE•added 2012/05/16 10:12 a.m.•129 views

CVE-2012-0671

Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .pict file.

9.3CVSS7.7AI score0.07508EPSS

CVE•added 2013/05/24 4:43 p.m.•129 views

CVE-2013-0986

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted enof atoms in a movie file.

9.3CVSS7.7AI score0.03627EPSS

CVE•added 2012/11/09 7:55 p.m.•123 views

CVE-2012-3752

Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime TeXML file.

9.3CVSS7.6AI score0.79074EPSS

CVE•added 2011/10/28 2:49 a.m.•122 views

CVE-2011-3250

Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with JPEG2000 encoding.

9.3CVSS7.3AI score0.06419EPSS

CVE•added 2013/05/24 4:43 p.m.•122 views

CVE-2013-1020

Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JPEG data in a movie file.

9.3CVSS7.5AI score0.0495EPSS

CVE•added 2012/05/16 10:12 a.m.•117 views

CVE-2012-0664

Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted text track in a movie file.

9.3CVSS7.9AI score0.05677EPSS

CVE•added 2013/05/24 4:43 p.m.•117 views

CVE-2013-1017

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.

9.3CVSS7.7AI score0.82374EPSS

CVE•added 2012/05/16 10:12 a.m.•116 views

CVE-2012-0667

Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTVR movie file.

9.3CVSS7.4AI score0.04315EPSS

CVE•added 2015/08/17 12:0 a.m.•98 views

CVE-2015-3791

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-37...

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2015/08/17 12:0 a.m.•78 views

CVE-2015-3792

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2015/08/16 11:59 p.m.•76 views

CVE-2015-3788

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2015/08/16 11:59 p.m.•63 views

CVE-2015-3779

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-37...

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2014/02/27 1:55 a.m.•61 views

CVE-2014-1246

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ftab atom in a movie file.

9.3CVSS7.7AI score0.0512EPSS

CVE•added 2015/08/16 11:59 p.m.•60 views

CVE-2015-3765

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-37...

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2015/08/17 12:0 a.m.•60 views

CVE-2015-5751

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2011/10/28 2:49 a.m.•57 views

CVE-2011-3249

Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with FLC encoding.

9.3CVSS7.4AI score0.04024EPSS

CVE•added 2014/02/27 1:55 a.m.•57 views

CVE-2014-1250

Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted ttfo element in a movie file.

9.3CVSS7.5AI score0.03623EPSS

CVE•added 2010/08/31 8:0 p.m.•55 views

CVE-2010-1818

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.

9.3CVSS7.3AI score0.76511EPSS

CVE•added 2011/08/04 2:45 a.m.•55 views

CVE-2011-0251

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSZ atoms in a QuickTime movie file.

9.3CVSS8.7AI score0.05695EPSS

CVE•added 2014/02/27 1:55 a.m.•55 views

CVE-2014-1243

Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted track list in a movie file.

9.3CVSS7.6AI score0.03917EPSS

CVE•added 2014/02/27 1:55 a.m.•55 views

CVE-2014-1244

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

9.3CVSS7.8AI score0.04028EPSS

CVE•added 2010/12/09 8:0 p.m.•54 views

CVE-2010-3801

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted FlashPix file.

9.3CVSS6.8AI score0.08EPSS

CVE•added 2014/02/27 1:55 a.m.•54 views

CVE-2014-1245

Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted stsz atom in a movie file.

9.3CVSS7.4AI score0.03439EPSS

CVE•added 2011/08/15 9:55 p.m.•53 views

CVE-2011-0257

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.

9.3CVSS7.6AI score0.8475EPSS

CVE•added 2011/09/06 3:55 p.m.•53 views

CVE-2011-0258

Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image description associated with an mp4v tag in a movie file.

9.3CVSS7.8AI score0.075EPSS

CVE•added 2012/05/16 10:12 a.m.•53 views

CVE-2012-0669

Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

9.3CVSS7.8AI score0.04452EPSS

CVE•added 2012/05/16 10:12 a.m.•53 views

CVE-2012-0670

Integer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted sean atom in a movie file.

9.3CVSS7.7AI score0.07138EPSS

CVE•added 2013/05/24 4:43 p.m.•53 views

CVE-2013-1019

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

9.3CVSS7.7AI score0.04963EPSS

CVE•added 2014/02/27 1:55 a.m.•53 views

CVE-2014-1251

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted clef atom in a movie file.

9.3CVSS7.8AI score0.06825EPSS

CVE•added 2009/09/10 9:30 p.m.•52 views

CVE-2009-2798

Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file.

9.3CVSS7.7AI score0.07937EPSS

CVE•added 2011/08/04 2:45 a.m.•52 views

CVE-2011-0252

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STTS atoms in a QuickTime movie file.

9.3CVSS8.7AI score0.05695EPSS

CVE•added 2015/08/17 12:0 a.m.•52 views

CVE-2015-3789

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2015/08/17 12:0 a.m.•52 views

CVE-2015-3790

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2015/08/17 12:0 a.m.•52 views

CVE-2015-5753

6.8CVSS9.3AI score0.0324EPSS

CVE•added 2010/03/31 6:30 p.m.•51 views

CVE-2010-0529

Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a BkPixPat opcode (0x12) containing crafted values that are used in a calculation for memor...

9.3CVSS8.1AI score0.04161EPSS

CVE•added 2011/08/04 2:45 a.m.•51 views

CVE-2011-0246

Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.

9.3CVSS8AI score0.04248EPSS

CVE•added 2011/08/15 9:55 p.m.•51 views

CVE-2011-0256

Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted track run atoms in a QuickTime movie file.

9.3CVSS7.8AI score0.02524EPSS

CVE•added 2014/02/27 1:55 a.m.•51 views

CVE-2014-1247

Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted dref atom in a movie file.

9.3CVSS7.7AI score0.03623EPSS

CVE•added 2006/05/12 8:6 p.m.•50 views

CVE-2006-1453

Stack-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file containing malformed font information.

5.1CVSS7.6AI score0.24607EPSS

CVE•added 2009/06/02 6:30 p.m.•50 views

CVE-2009-0951

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC compression file.

9.3CVSS7.9AI score0.21519EPSS

CVE•added 2009/09/10 9:30 p.m.•50 views

CVE-2009-2203

Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG-4 video file.

9.3CVSS7.7AI score0.07937EPSS

CVE•added 2010/08/16 6:39 p.m.•50 views

CVE-2010-1799

Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

9.3CVSS8AI score0.67678EPSS

CVE•added 2012/11/09 7:55 p.m.•50 views

CVE-2012-3755

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Targa image.

9.3CVSS7.8AI score0.44525EPSS

CVE•added 2012/11/09 7:55 p.m.•50 views

CVE-2012-3757

Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file.

9.3CVSS7.7AI score0.07138EPSS

CVE•added 2014/02/27 1:55 a.m.•50 views

CVE-2014-1249

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PSD image.

9.3CVSS7.7AI score0.0512EPSS

CVE•added 2009/01/21 8:30 p.m.•49 views

CVE-2009-0007

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms.

9.3CVSS7.9AI score0.35592EPSS

Total number of security vulnerabilities98