Login Request a demo
Unscored severity · published May 12, 2005
CVE-2005-1579
Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition (.qtz) file that uses…
–
CVSS
2%
EPSS
No
On KEV
Description
Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition (.qtz) file that uses certain patches to read local information, then other patches to send the information to the attacker.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QU
Quicktime · Apple
7.0 · source: NVD
Affected product
QU
Quicktime
Apple
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1579
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1579
Vendor Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0265.html
docs.info.apple.com
http://docs.info.apple.com/article.html?artnum=301714
Vendor Advisory
http://lists.apple.com/archives/quartzcomposer-dev/2005/May/msg00250.html
Vendor Advisory
http://lists.apple.com/archives/quartzcomposer-dev/2005/May/msg00263.html
lists.apple.com
http://lists.apple.com/archives/security-announce/2005/May/msg00006.html
Vendor Advisory
http://remahl.se/david/vuln/018
More from Quicktime
9.8
CVE-2011-3428
Buffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute arbitrary code
7.8
CVE-2017-2218
Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory
6.6
CVE-2015-7117
Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a…
6.6
CVE-2015-7092
Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted TXXX…
6.6
CVE-2015-7091
Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a…