) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*
- CPE Name Search: true
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2007-0716 |
Stack-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QTIF file. Published: March 05, 2007; 5:19:00 PM -0500 |
V3.x:(not available) V2.0: 5.8 MEDIUM |
| CVE-2007-0717 |
Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QTIF file. Published: March 05, 2007; 5:19:00 PM -0500 |
V3.x:(not available) V2.0: 5.8 MEDIUM |
| CVE-2007-0718 |
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a QTIF file with a Video Sample Description containing a Color table ID of 0, which triggers memory corruption when QuickTime assumes that a color table exists. Published: March 05, 2007; 5:19:00 PM -0500 |
V3.x:(not available) V2.0: 5.8 MEDIUM |
| CVE-2007-0059 |
Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie (.MOV) with an HREF Track (HREFTrack) that contains an automatic action tag with a local URI, which is executed in a local zone during preview, as exploited by a MySpace worm. Published: January 04, 2007; 7:28:00 PM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2006-4381 |
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie. Published: September 12, 2006; 7:07:00 PM -0400 |
V3.x:(not available) V2.0: 5.1 MEDIUM |
| CVE-2006-4382 |
Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote attackers to execute arbitrary code via a crafted QuickTime movie. Published: September 12, 2006; 7:07:00 PM -0400 |
V3.x:(not available) V2.0: 5.1 MEDIUM |
| CVE-2006-4384 |
Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64 chunk in a FLIC (FLC) movie. Published: September 12, 2006; 7:07:00 PM -0400 |
V3.x:(not available) V2.0: 5.1 MEDIUM |
| CVE-2006-4385 |
Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image. Published: September 12, 2006; 7:07:00 PM -0400 |
V3.x:(not available) V2.0: 5.1 MEDIUM |
| CVE-2006-4386 |
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie, a different issue than CVE-2006-4381. Published: September 12, 2006; 7:07:00 PM -0400 |
V3.x:(not available) V2.0: 5.1 MEDIUM |
| CVE-2006-4388 |
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix file. Published: September 12, 2006; 7:07:00 PM -0400 |
V3.x:(not available) V2.0: 5.1 MEDIUM |
| CVE-2006-4389 |
Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an operation on an uninitialized object. Published: September 12, 2006; 7:07:00 PM -0400 |
V3.x:(not available) V2.0: 5.1 MEDIUM |