Unscored severity · published Dec 31, 2005
CVE-2005-3707
Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files
–
CVSS
8%
EPSS
No
On KEV
Description
Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.0% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QU
Quicktime · Apple
through 7.0.3; 7.0; 7.0.1; 7.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3707
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3707
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0445.html
Patch
http://docs.info.apple.com/article.html?artnum=303101
Patch
http://secunia.com/advisories/18370
securitytracker.com
http://securitytracker.com/id?1015464
US Government Resource
http://www.kb.cert.org/vuls/id/115729
www.osvdb.org
http://www.osvdb.org/22336
More from Quicktime
9.8
CVE-2011-3428
Buffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute arbitrary code
7.8
CVE-2017-2218
Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory
6.6
CVE-2015-7117
Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a…
6.6
CVE-2015-7092
Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted TXXX…
6.6
CVE-2015-7091
Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a…