QU
Product
Quicktime
246
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 9Low 0
Watch
Add Quicktime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-3802 | – | Dec 9 | Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)… Affected: through 7.6.8; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +34 more |
| CVE-2010-3801 | – | Dec 9 | Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted FlashPix file Affected: through 7.6.8; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +34 more |
| CVE-2010-3800 | – | Dec 9 | Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file Affected: through 7.6.8; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +34 more |
| CVE-2010-0530 | – | Dec 9 | Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive… Affected: through 7.6.8; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +34 more |
| CVE-2010-3789 | – | Nov 16 | QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a… Affected: All versions, or not specified |
| CVE-2010-3793 | – | Nov 16 | QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a… Affected: All versions, or not specified |
| CVE-2010-3792 | – | Nov 16 | Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via… Affected: All versions, or not specified |
| CVE-2010-3791 | – | Nov 16 | Buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: All versions, or not specified |
| CVE-2010-3790 | – | Nov 16 | QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a… Affected: All versions, or not specified |
| CVE-2010-3788 | – | Nov 16 | QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of JP2 image data, which allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2010-1818 | – | Aug 31 | The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the… Affected: 6.0; 6.0.0; 6.0.1; 6.0.2; 6.1; 6.1.0; +34 more |
| CVE-2010-1799 | – | Aug 16 | Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of… Affected: 3.0; 4.1.2; 4.1.2; 4.1.2; 5.0; 5.0.1; +34 more |
| CVE-2010-0536 | – | Mar 31 | Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted BMP… Affected: through 7.6.0; 7.0.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; +16 more |
| CVE-2010-0529 | – | Mar 31 | Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application… Affected: through 7.6.0; 7.0.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; +16 more |
| CVE-2010-0528 | – | Mar 31 | Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color… Affected: through 7.6.0; 7.0.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; +18 more |
| CVE-2010-0527 | – | Mar 31 | Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT… Affected: through 7.6.0; 7.0.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; +16 more |
| CVE-2009-2799 | – | Sep 10 | Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264… Affected: through 7.6.2; 3.0; 4.1.2; 4.1.2; 4.1.2; 5.0; +34 more |
| CVE-2009-2798 | – | Sep 10 | Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted… Affected: through 7.6.2; 3.0; 4.1.2; 4.1.2; 4.1.2; 5.0; +34 more |
| CVE-2009-2203 | – | Sep 10 | Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG-4 video file Affected: through 7.6.2; 3.0; 4.1.2; 4.1.2; 4.1.2; 5.0; +34 more |
| CVE-2009-2202 | – | Sep 10 | Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted H.264 movie… Affected: through 7.6.1; through 7.6.1; 3.0; 4.1.2; 4.1.2; 4.1.2; +34 more |
| CVE-2009-0957 | – | Jun 2 | Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2… Affected: 3.0; 4.1.2; 4.1.2; 4.1.2; 5.0; 5.0.1; +34 more |
| CVE-2009-0956 | – | Jun 2 | Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of… Affected: through 7.6.1; 3.0; 4.1.2; 4.1.2; 4.1.2; 5.0; +34 more |
| CVE-2009-0955 | – | Jun 2 | Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple… Affected: through 7.6.1; through 7.6.1; 3.0; 4.1.2; 4.1.2; 4.1.2; +34 more |
| CVE-2009-0954 | – | Jun 2 | Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: through 7.6.1; 3.0; 4.1.2; 4.1.2; 5.0; 5.0.1; +34 more |
| CVE-2009-0953 | – | Jun 2 | Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT… Affected: through 7.6.1; 3.0; 4.1.2; 4.1.2; 4.1.2; 5.0; +34 more |
| CVE-2009-0952 | – | Jun 2 | Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted compressed PSD… Affected: through 7.6.1; 3.0; 4.1.2; 4.1.2; 4.1.2; 5.0; +34 more |
| CVE-2009-0951 | – | Jun 2 | Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC… Affected: through 7.6.1; 3.0; 4.1.2; 4.1.2; 4.1.2; 5.0; +34 more |
| CVE-2009-0188 | – | Jun 2 | Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie composed… Affected: through 7.6.1; 3.0; 4.1.2; 4.1.2; 4.1.2; 5.0; +34 more |
| CVE-2009-0185 | – | Jun 2 | Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted MS ADPCM… Affected: through 7.6.1; 3.0; 4.1.2; 4.1.2; 4.1.2; 5.0; +34 more |
| CVE-2009-0007 | – | Jan 21 | Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a… Affected: through 7.5.5; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +34 more |
| CVE-2009-0006 | – | Jan 21 | Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a… Affected: through 7.5.5; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +34 more |
| CVE-2009-0005 | – | Jan 21 | Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a… Affected: through 7.5.5; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +26 more |
| CVE-2009-0004 | – | Jan 21 | Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted MP3… Affected: through 7.5.5; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +26 more |
| CVE-2009-0003 | – | Jan 21 | Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie… Affected: through 7.5.5; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +26 more |
| CVE-2009-0002 | – | Jan 21 | Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a… Affected: through 7.5.5; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +26 more |
| CVE-2009-0001 | – | Jan 21 | Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a… Affected: through 7.5.5; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +26 more |
| CVE-2008-5406 | – | Dec 10 | Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute… Affected: 7.5.5 |
| CVE-2008-4116 | – | Sep 18 | Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long type… Affected: 7.5.5 |
| CVE-2008-3635 | – | Sep 11 | Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 (aka IV32) codec for QuickTime, when used with Apple QuickTime before 7.5.5 on… Affected: through 7.5; 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; +14 more |
| CVE-2008-3629 | – | Sep 11 | Apple QuickTime before 7.5.5 allows remote attackers to cause a denial of service (application crash) via a crafted PICT image that triggers an out-of-bounds read Affected: through 7.5; 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; +14 more |
| CVE-2008-3628 | – | Sep 11 | Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, related to an… Affected: before 7.5.5 |
| CVE-2008-3627 | – | Sep 11 | Apple QuickTime before 7.5.5 does not properly handle (1) MDAT atoms in MP4 video files within QuickTimeH264.qtx, (2) MDAT atoms in mov video files within QuickTimeH264.scalar,… Affected: before 7.5.5 |
| CVE-2008-3626 | – | Sep 11 | The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote… Affected: through 7.4.5; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +22 more |
| CVE-2008-3625 | – | Sep 11 | Stack-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime… Affected: before 7.5.5 |
| CVE-2008-3624 | – | Sep 11 | Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime… Affected: through 7.5; 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; +14 more |
| CVE-2008-3615 | – | Sep 11 | ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote… Affected: before 7.5.5 |
| CVE-2008-3614 | – | Sep 11 | Integer overflow in Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT… Affected: through 7.5; 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; +14 more |
| CVE-2008-1739 | – | Sep 3 | Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which… Affected: through 7.4.4; 3.0; 5.0; 5.0.1; 5.0.2; 6.0; +22 more |
| CVE-2008-1582 | – | Jun 10 | Unspecified vulnerability in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AAC-encoded… Affected: 7.4.5 |
| CVE-2008-1585 | – | Jun 10 | Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in video files, which sends these URIs to… Affected: through 7.4.5 |