Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264 movie file.
Max CVSS
9.3
EPSS Score
62.82%
Published
2009-09-10
Updated
2018-10-30
Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file.
Max CVSS
9.3
EPSS Score
62.82%
Published
2009-09-10
Updated
2018-10-30
Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG-4 video file.
Max CVSS
9.3
EPSS Score
2.00%
Published
2009-09-10
Updated
2018-10-30
Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted H.264 movie file.
Max CVSS
9.3
EPSS Score
2.00%
Published
2009-09-10
Updated
2018-10-30
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 image.
Max CVSS
9.3
EPSS Score
94.18%
Published
2009-06-02
Updated
2018-10-30
Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero.
Max CVSS
9.3
EPSS Score
2.14%
Published
2009-06-02
Updated
2018-10-30
Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a "sign extension issue."
Max CVSS
9.3
EPSS Score
92.24%
Published
2009-06-02
Updated
2018-10-30
Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie file containing crafted Clipping Region (CRGN) atom types.
Max CVSS
9.3
EPSS Score
94.18%
Published
2009-06-02
Updated
2018-10-30
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
Max CVSS
9.3
EPSS Score
62.63%
Published
2009-06-02
Updated
2018-10-30
Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted compressed PSD image.
Max CVSS
9.3
EPSS Score
13.11%
Published
2009-06-02
Updated
2018-10-30
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC compression file.
Max CVSS
9.3
EPSS Score
23.49%
Published
2009-06-02
Updated
2018-10-30
Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie composed of a Sorenson 3 video file.
Max CVSS
9.3
EPSS Score
4.73%
Published
2009-06-02
Updated
2018-10-30
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted MS ADPCM encoded audio data in an AVI movie file.
Max CVSS
9.3
EPSS Score
6.35%
Published
2009-06-02
Updated
2018-10-30
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms.
Max CVSS
9.3
EPSS Score
88.56%
Published
2009-01-21
Updated
2017-09-29
Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Cinepak encoded movie file with a crafted MDAT atom that triggers a heap-based buffer overflow.
Max CVSS
9.3
EPSS Score
59.45%
Published
2009-01-21
Updated
2018-10-11
Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted H.263 encoded movie file that triggers memory corruption.
Max CVSS
9.3
EPSS Score
3.82%
Published
2009-01-21
Updated
2018-10-30
Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted MP3 audio file.
Max CVSS
9.3
EPSS Score
3.00%
Published
2009-01-21
Updated
2018-10-30
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value in the _WAVEFORMATEX structure.
Max CVSS
9.3
EPSS Score
42.02%
Published
2009-01-21
Updated
2018-10-30
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms.
Max CVSS
9.3
EPSS Score
89.25%
Published
2009-01-21
Updated
2018-10-30
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL.
Max CVSS
9.3
EPSS Score
2.90%
Published
2009-01-21
Updated
2018-10-30
20 vulnerabilities found