Quicktime@7.6.8 Security Vulnerabilities and Issues — Quicktime@7.6.8 CVE List

Lucene search

AppleQuicktime7.6.8

56 matches found

CVE•added 2012/05/16 10:12 a.m.•169 views

CVE-2012-0663

Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file.

9.3CVSS7.6AI score0.68246EPSS

CVE•added 2012/11/09 7:55 p.m.•153 views

CVE-2012-3753

Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type.

9.3CVSS7.7AI score0.78056EPSS

CVE•added 2012/11/09 7:55 p.m.•151 views

CVE-2012-3754

Use-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

9.3CVSS7.7AI score0.05303EPSS

CVE•added 2012/11/09 7:55 p.m.•135 views

CVE-2012-3756

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rnet box in an MP4 movie file.

9.3CVSS7.7AI score0.08336EPSS

CVE•added 2012/05/16 10:12 a.m.•129 views

CVE-2012-0671

Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .pict file.

9.3CVSS7.7AI score0.07508EPSS

CVE•added 2013/05/24 4:43 p.m.•129 views

CVE-2013-0986

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted enof atoms in a movie file.

9.3CVSS7.7AI score0.03627EPSS

CVE•added 2012/11/09 7:55 p.m.•123 views

CVE-2012-3752

Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime TeXML file.

9.3CVSS7.6AI score0.79074EPSS

CVE•added 2011/10/28 2:49 a.m.•122 views

CVE-2011-3250

Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with JPEG2000 encoding.

9.3CVSS7.3AI score0.06419EPSS

CVE•added 2013/05/24 4:43 p.m.•122 views

CVE-2013-1020

Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JPEG data in a movie file.

9.3CVSS7.5AI score0.0495EPSS

CVE•added 2012/05/16 10:12 a.m.•117 views

CVE-2012-0664

Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted text track in a movie file.

9.3CVSS7.9AI score0.05677EPSS

CVE•added 2013/05/24 4:43 p.m.•117 views

CVE-2013-1017

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.

9.3CVSS7.7AI score0.82374EPSS

CVE•added 2012/05/16 10:12 a.m.•116 views

CVE-2012-0667

Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTVR movie file.

9.3CVSS7.4AI score0.04315EPSS

CVE•added 2014/02/27 1:55 a.m.•61 views

CVE-2014-1246

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ftab atom in a movie file.

9.3CVSS7.7AI score0.0512EPSS

CVE•added 2011/10/28 2:49 a.m.•57 views

CVE-2011-3249

Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with FLC encoding.

9.3CVSS7.4AI score0.04024EPSS

CVE•added 2014/02/27 1:55 a.m.•57 views

CVE-2014-1250

Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted ttfo element in a movie file.

9.3CVSS7.5AI score0.03623EPSS

CVE•added 2011/08/04 2:45 a.m.•55 views

CVE-2011-0251

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSZ atoms in a QuickTime movie file.

9.3CVSS8.7AI score0.05695EPSS

CVE•added 2014/02/27 1:55 a.m.•55 views

CVE-2014-1243

Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted track list in a movie file.

9.3CVSS7.6AI score0.03917EPSS

CVE•added 2014/02/27 1:55 a.m.•55 views

CVE-2014-1244

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

9.3CVSS7.8AI score0.04028EPSS

CVE•added 2014/02/27 1:55 a.m.•54 views

CVE-2014-1245

Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted stsz atom in a movie file.

9.3CVSS7.4AI score0.03439EPSS

CVE•added 2011/08/15 9:55 p.m.•53 views

CVE-2011-0257

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.

9.3CVSS7.6AI score0.8475EPSS

CVE•added 2011/09/06 3:55 p.m.•53 views

CVE-2011-0258

Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image description associated with an mp4v tag in a movie file.

9.3CVSS7.8AI score0.075EPSS

CVE•added 2012/05/16 10:12 a.m.•53 views

CVE-2012-0669

Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

9.3CVSS7.8AI score0.04452EPSS

CVE•added 2012/05/16 10:12 a.m.•53 views

CVE-2012-0670

Integer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted sean atom in a movie file.

9.3CVSS7.7AI score0.07138EPSS

CVE•added 2013/05/24 4:43 p.m.•53 views

CVE-2013-1019

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

9.3CVSS7.7AI score0.04963EPSS

CVE•added 2014/02/27 1:55 a.m.•53 views

CVE-2014-1251

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted clef atom in a movie file.

9.3CVSS7.8AI score0.06825EPSS

CVE•added 2011/08/04 2:45 a.m.•52 views

CVE-2011-0252

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STTS atoms in a QuickTime movie file.

9.3CVSS8.7AI score0.05695EPSS

CVE•added 2011/08/04 2:45 a.m.•51 views

CVE-2011-0246

Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.

9.3CVSS8AI score0.04248EPSS

CVE•added 2011/08/15 9:55 p.m.•51 views

CVE-2011-0256

Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted track run atoms in a QuickTime movie file.

9.3CVSS7.8AI score0.02524EPSS

CVE•added 2014/02/27 1:55 a.m.•51 views

CVE-2014-1247

Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted dref atom in a movie file.

9.3CVSS7.7AI score0.03623EPSS

CVE•added 2012/11/09 7:55 p.m.•50 views

CVE-2012-3755

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Targa image.

9.3CVSS7.8AI score0.44525EPSS

CVE•added 2012/11/09 7:55 p.m.•50 views

CVE-2012-3757

Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file.

9.3CVSS7.7AI score0.07138EPSS

CVE•added 2014/02/27 1:55 a.m.•50 views

CVE-2014-1249

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PSD image.

9.3CVSS7.7AI score0.0512EPSS

CVE•added 2011/08/04 2:45 a.m.•49 views

CVE-2011-0250

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSS atoms in a QuickTime movie file.

9.3CVSS8.7AI score0.05695EPSS

CVE•added 2013/05/24 4:43 p.m.•49 views

CVE-2013-0987

Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QTIF file.

9.3CVSS7.5AI score0.04596EPSS

CVE•added 2011/08/04 2:45 a.m.•48 views

CVE-2011-0248

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTL file.

9.3CVSS7.9AI score0.0396EPSS

CVE•added 2011/10/28 2:49 a.m.•48 views

CVE-2011-3251

Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted TKHD atoms in a QuickTime movie file.

9.3CVSS9.3AI score0.02661EPSS

CVE•added 2012/05/16 10:12 a.m.•48 views

CVE-2012-0668

Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding.

9.3CVSS7.7AI score0.03233EPSS

CVE•added 2012/11/09 7:55 p.m.•48 views

CVE-2012-3751

Use-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with a crafted qtactivex parameter in an OBJECT element.

9.3CVSS7.5AI score0.05303EPSS

CVE•added 2013/05/24 4:43 p.m.•48 views

CVE-2013-1022

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted mvhd atoms in a movie file.

9.3CVSS7.8AI score0.05798EPSS

CVE•added 2014/02/27 1:55 a.m.•48 views

CVE-2014-1248

Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ldat atom in a movie file.

9.3CVSS7.7AI score0.0512EPSS

CVE•added 2012/11/09 7:55 p.m.•47 views

CVE-2011-1374

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted REGION record in a PICT file.

9.3CVSS7.8AI score0.0545EPSS

CVE•added 2011/10/28 2:49 a.m.•47 views

CVE-2011-3248

Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font table in a QuickTime movie file.

9.3CVSS7.2AI score0.03943EPSS

CVE•added 2013/05/24 4:43 p.m.•46 views

CVE-2013-1021

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG data in a movie file.

9.3CVSS7.8AI score0.0618EPSS

CVE•added 2012/05/16 10:12 a.m.•45 views

CVE-2012-0666

Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTMovie object.

9.3CVSS7.9AI score0.05074EPSS

CVE•added 2012/11/09 7:55 p.m.•45 views

CVE-2012-3758

Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted transform attribute in a text3GTrack element in a QuickTime TeXML file.

9.3CVSS7.8AI score0.05677EPSS

CVE•added 2011/08/04 2:45 a.m.•44 views

CVE-2011-0245

Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pict file.

9.3CVSS7.8AI score0.04248EPSS

CVE•added 2011/08/04 2:45 a.m.•43 views

CVE-2011-0249

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSC atoms in a QuickTime movie file.

9.3CVSS8.7AI score0.05695EPSS

CVE•added 2013/05/24 4:43 p.m.•43 views

CVE-2013-0988

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FPX file.

9.3CVSS7.7AI score0.06038EPSS

CVE•added 2013/05/24 4:43 p.m.•43 views

CVE-2013-1015

Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TeXML file.

9.3CVSS7.5AI score0.05543EPSS

CVE•added 2012/05/16 10:12 a.m.•42 views

CVE-2012-0665

Heap-based buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

9.3CVSS7.9AI score0.03972EPSS

Total number of security vulnerabilities56