Quicktime@7.1.5 Security Vulnerabilities and Issues — Page 2 of Quicktime@7.1.5 CVE List

Lucene search

AppleQuicktime7.1.5

103 matches found

CVE•added 2009/01/21 8:30 p.m.•48 views

CVE-2009-0001

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL.

9.3CVSS9.2AI score0.06199EPSS

CVE•added 2010/03/31 6:30 p.m.•48 views

CVE-2010-0528

Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length val...

9.3CVSS7.9AI score0.03156EPSS

CVE•added 2011/08/04 2:45 a.m.•48 views

CVE-2011-0248

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTL file.

9.3CVSS7.9AI score0.0396EPSS

CVE•added 2011/10/28 2:49 a.m.•48 views

CVE-2011-3251

Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted TKHD atoms in a QuickTime movie file.

9.3CVSS9.3AI score0.02661EPSS

CVE•added 2012/05/16 10:12 a.m.•48 views

CVE-2012-0668

Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding.

9.3CVSS7.7AI score0.03233EPSS

CVE•added 2013/05/24 4:43 p.m.•48 views

CVE-2013-1022

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted mvhd atoms in a movie file.

9.3CVSS7.8AI score0.05798EPSS

CVE•added 2014/02/27 1:55 a.m.•48 views

CVE-2014-1248

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ldat atom in a movie file.

9.3CVSS7.7AI score0.0512EPSS

CVE•added 2009/01/21 8:30 p.m.•47 views

CVE-2009-0002

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms.

9.3CVSS7.9AI score0.40449EPSS

CVE•added 2009/06/02 6:30 p.m.•47 views

CVE-2009-0952

Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted compressed PSD image.

9.3CVSS7.8AI score0.06275EPSS

CVE•added 2009/06/02 6:30 p.m.•47 views

CVE-2009-0955

Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a "sign extension issue."

9.3CVSS7.7AI score0.284EPSS

CVE•added 2010/12/09 8:0 p.m.•47 views

CVE-2010-4009

Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

9.3CVSS6.6AI score0.03335EPSS

CVE•added 2012/11/09 7:55 p.m.•47 views

CVE-2011-1374

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted REGION record in a PICT file.

9.3CVSS7.8AI score0.0545EPSS

CVE•added 2011/10/28 2:49 a.m.•47 views

CVE-2011-3248

Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font table in a QuickTime movie file.

9.3CVSS7.2AI score0.03943EPSS

CVE•added 2007/07/15 9:30 p.m.•46 views

CVE-2007-2402

QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.

4.3CVSS5.5AI score0.01093EPSS

CVE•added 2010/03/31 6:30 p.m.•46 views

CVE-2010-0527

Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.

9.3CVSS7.8AI score0.01944EPSS

CVE•added 2010/12/09 8:0 p.m.•46 views

CVE-2010-3802

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted panorama atom in a QuickTime Virtual Reality (QTVR) movie file.

9.3CVSS6.7AI score0.08EPSS

CVE•added 2013/05/24 4:43 p.m.•46 views

CVE-2013-1021

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG data in a movie file.

9.3CVSS7.8AI score0.0618EPSS

CVE•added 2009/06/02 6:30 p.m.•45 views

CVE-2009-0957

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 image.

9.3CVSS8AI score0.27783EPSS

CVE•added 2009/09/10 9:30 p.m.•45 views

CVE-2009-2202

Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted H.264 movie file.

9.3CVSS7.8AI score0.10923EPSS

CVE•added 2010/12/09 8:0 p.m.•45 views

CVE-2010-1508

Heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Track Header (aka tkhd) atoms.

9.3CVSS8.1AI score0.05458EPSS

CVE•added 2012/05/16 10:12 a.m.•45 views

CVE-2012-0666

Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTMovie object.

9.3CVSS7.9AI score0.05074EPSS

CVE•added 2012/11/09 7:55 p.m.•45 views

CVE-2012-3758

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted transform attribute in a text3GTrack element in a QuickTime TeXML file.

9.3CVSS7.8AI score0.05677EPSS

CVE•added 2009/01/21 8:30 p.m.•44 views

CVE-2009-0006

Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Cinepak encoded movie file with a crafted MDAT atom that triggers a heap-based buffer overflow.

9.3CVSS7.7AI score0.38337EPSS

CVE•added 2009/06/02 6:30 p.m.•44 views

CVE-2009-0954

Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie file containing crafted Clipping Region (CRGN) atom types.

9.3CVSS8AI score0.27783EPSS

CVE•added 2009/06/02 6:30 p.m.•44 views

CVE-2009-0956

Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero.

9.3CVSS7.7AI score0.0888EPSS

CVE•added 2010/03/31 6:30 p.m.•44 views

CVE-2010-0536

Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted BMP image.

9.3CVSS7.9AI score0.02085EPSS

CVE•added 2011/08/04 2:45 a.m.•44 views

CVE-2011-0245

Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pict file.

9.3CVSS7.8AI score0.04248EPSS

CVE•added 2009/06/02 6:30 p.m.•43 views

CVE-2009-0185

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted MS ADPCM encoded audio data in an AVI movie file.

9.3CVSS8AI score0.28197EPSS

CVE•added 2010/12/09 8:0 p.m.•43 views

CVE-2010-0530

Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive information by reading files in this directory.

2.1CVSS5.1AI score0.00107EPSS

CVE•added 2011/08/04 2:45 a.m.•43 views

CVE-2011-0249

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSC atoms in a QuickTime movie file.

9.3CVSS8.7AI score0.05695EPSS

CVE•added 2013/05/24 4:43 p.m.•43 views

CVE-2013-0988

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FPX file.

9.3CVSS7.7AI score0.06038EPSS

CVE•added 2013/05/24 4:43 p.m.•43 views

CVE-2013-1015

Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TeXML file.

9.3CVSS7.5AI score0.05543EPSS

CVE•added 2009/01/21 8:30 p.m.•42 views

CVE-2009-0003

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value in the _WAVEFORMATEX structure.

9.3CVSS7.9AI score0.31805EPSS

CVE•added 2009/01/21 8:30 p.m.•42 views

CVE-2009-0004

Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted MP3 audio file.

9.3CVSS7.8AI score0.06593EPSS

CVE•added 2012/05/16 10:12 a.m.•42 views

CVE-2012-0665

Heap-based buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

9.3CVSS7.9AI score0.03972EPSS

CVE•added 2013/05/24 4:43 p.m.•42 views

CVE-2013-0989

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP3 file.

9.3CVSS7.7AI score0.06038EPSS

CVE•added 2013/05/24 4:43 p.m.•42 views

CVE-2013-1018

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

9.3CVSS7.8AI score0.04549EPSS

CVE•added 2007/07/15 9:30 p.m.•41 views

CVE-2007-2394

Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.

9.3CVSS7.5AI score0.48805EPSS

CVE•added 2008/09/03 7:42 p.m.•41 views

CVE-2008-1739

Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption.

6.8CVSS7.5AI score0.01258EPSS

CVE•added 2009/06/02 6:30 p.m.•41 views

CVE-2009-0953

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.

9.3CVSS8AI score0.21519EPSS

CVE•added 2011/10/28 2:49 a.m.•41 views

CVE-2011-3247

Integer overflow in Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT file.

9.3CVSS9.1AI score0.02692EPSS

CVE•added 2007/04/26 8:19 p.m.•40 views

CVE-2007-2296

Integer overflow in the FlipFileTypeAtom_BtoN function in Apple Quicktime 7.1.5, and other versions before 7.2, allows remote attackers to execute arbitrary code via a crafted M4V (MP4) file.

9.3CVSS7.4AI score0.33595EPSS

CVE•added 2007/07/15 9:30 p.m.•40 views

CVE-2007-2397

QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets.

9.3CVSS7.3AI score0.38251EPSS

CVE•added 2012/05/16 10:12 a.m.•40 views

CVE-2012-0265

Stack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pathname for a file.

9.3CVSS8AI score0.05677EPSS

CVE•added 2008/09/11 1:13 a.m.•39 views

CVE-2008-3635

Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 (aka IV32) codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafte...

9.3CVSS7.9AI score0.04267EPSS

CVE•added 2009/06/02 6:30 p.m.•39 views

CVE-2009-0188

Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie composed of a Sorenson 3 video file.

9.3CVSS7.8AI score0.09031EPSS

CVE•added 2013/05/24 4:43 p.m.•39 views

CVE-2013-1016

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.263 encoding.

9.3CVSS7.8AI score0.04854EPSS

CVE•added 2007/04/26 8:19 p.m.•38 views

CVE-2007-2295

Heap-based buffer overflow in the JVTCompEncodeFrame function in Apple Quicktime 7.1.5 and other versions before 7.2 allows remote attackers to execute arbitrary code via a crafted H.264 MOV file.

9.3CVSS7.6AI score0.39754EPSS

CVE•added 2007/07/15 9:30 p.m.•38 views

CVE-2007-2392

Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via a crafted movie file that triggers memory corruption.

9.3CVSS7.2AI score0.10438EPSS

CVE•added 2007/07/15 9:30 p.m.•37 views

CVE-2007-2393

The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.

9.3CVSS7.3AI score0.11782EPSS

Total number of security vulnerabilities103