VendorsApplequicktime6.5.2
Vulnerabilities

Apple Quicktime 6.5.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

90CVEs
CVE-2006-4382
Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote attackers to execute arbitrary code via a crafted QuickTime movie.
Published 2006-09-12 · Modified
5.1EPSS 0.070
CVE-2006-4385
Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image.
Published 2006-09-12 · Modified
5.1EPSS 0.067
CVE-2006-4386
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie, a different issue than CVE-2006-4381.
Published 2006-09-12 · Modified
5.1EPSS 0.062
CVE-2006-4388
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix file.
Published 2006-09-12 · Modified
5.1EPSS 0.059
CVE-2006-4381
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie.
Published 2006-09-12 · Modified
5.1EPSS 0.046
CVE-2005-2756
Apple QuickTime before 7.0.3 allows user-assisted attackers to overwrite memory and execute arbitrary code via a crafted PICT file that triggers an overflow during expansion.
Published 2005-11-05 · Modified
5.1EPSS 0.042
CVE-2005-2754
Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with "Improper movie attributes."
Published 2005-11-05 · Modified
5.1EPSS 0.021
CVE-2005-2753
Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file that causes a sign extension of the length element in a Pascal style string.
Published 2005-11-05 · Modified
5.1EPSS 0.021
CVE-2005-2755
Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service (crash) via a crafted file with a missing movie attribute, which leads to a null dereference.
Published 2005-11-05 · Modified
2.6EPSS 0.018
CVE-2010-0530
Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive information by reading files in this directory.
Published 2010-12-09 · Modified
2.1EPSS 0.004
← Prev3 / 3