QU
Product
Quicktime
246
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 9Low 0
Watch
Add Quicktime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-1584 | – | Jun 10 | Stack-based buffer overflow in Indeo.qtx in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted Indeo… Affected: through 7.4.5 |
| CVE-2008-1583 | – | Jun 10 | Heap-based buffer overflow in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PICT image,… Affected: through 7.4.5 |
| CVE-2008-1581 | – | Jun 10 | Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted… Affected: through 7.4.5 |
| CVE-2008-2010 | – | Apr 30 | Unspecified vulnerability in Apple QuickTime Player on Windows XP SP2 and Vista SP1 allows remote attackers to execute arbitrary code via a crafted QuickTime media file Affected: All versions, or not specified |
| CVE-2008-1023 | – | Apr 4 | Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file Affected: through 7.4.4 |
| CVE-2008-1022 | – | Apr 4 | Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted VR movie with an obji atom of zero size Affected: through 7.4.4 |
| CVE-2008-1021 | – | Apr 4 | Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie… Affected: through 7.4.4 |
| CVE-2008-1020 | – | Apr 4 | Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak… Affected: through 7.4.4 |
| CVE-2008-1019 | – | Apr 4 | Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted PICT image file, related to an… Affected: through 7.4.4 |
| CVE-2008-1018 | – | Apr 4 | Heap-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via an MP4A movie with a malformed Channel Compositor (aka chan) atom Affected: through 7.4.4 |
| CVE-2008-1017 | – | Apr 4 | Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a… Affected: through 7.4.4 |
| CVE-2008-1016 | – | Apr 4 | Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbitrary code via a crafted movie that triggers memory… Affected: through 7.4.4 |
| CVE-2008-1015 | – | Apr 4 | Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie Affected: through 7.4.4 |
| CVE-2008-1014 | – | Apr 4 | Apple QuickTime before 7.4.5 does not properly handle external URLs in movies, which allows remote attackers to obtain sensitive information Affected: through 7.4.4 |
| CVE-2008-1013 | – | Apr 4 | Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet Affected: through 7.4.4 |
| CVE-2008-0778 | – | Feb 14 | Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and… Affected: through 7.4.1 |
| CVE-2008-0033 | – | Jan 16 | Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file… Affected: through 7.3.1.70 |
| CVE-2008-0036 | – | Jan 16 | Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding Affected: through 7.3 |
| CVE-2008-0032 | – | Jan 16 | Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource… Affected: through 7.3 |
| CVE-2008-0031 | – | Jan 16 | Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted… Affected: through 7.3 |
| CVE-2008-0234 | – | Jan 11 | Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long… Affected: 7.3.1.70; 7.4 |
| CVE-2007-4706 | – | Dec 15 | Heap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute arbitrary code via a crafted QTL file Affected: through 7.3 |
| CVE-2007-4707 | – | Dec 15 | Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts… Affected: through 7.3 |
| CVE-2007-6238 | – | Dec 4 | Unspecified vulnerability in Apple QuickTime 7.2 on Windows XP allows remote attackers to execute arbitrary code via unknown attack vectors, probably a different vulnerability… Affected: 7.2 |
| CVE-2007-6166 | – | Nov 29 | Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP)… Affected: through 7.3; 3.0; 4.1.2; 5.0; 5.0.1; 5.0.2; +18 more |
| CVE-2007-4674 | – | Nov 27 | An "integer arithmetic" error in Apple QuickTime 7.2 allows remote attackers to execute arbitrary code via a crafted movie file containing a movie atom with a large size value,… Affected: 7.2; 7.2; 7.2; 7.2; 7.2 |
| CVE-2007-3750 | – | Nov 7 | Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via crafted Sample Table Sample Descriptor (STSD) atoms in a movie file Affected: through 7.2 |
| CVE-2007-4672 | – | Nov 7 | Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image Affected: through 7.2 |
| CVE-2007-2395 | – | Nov 7 | Unspecified vulnerability in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a crafted image description atom in a movie file, related to "memory… Affected: through 7.2 |
| CVE-2007-4673 | – | Oct 4 | Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a… Affected: 7.2; 7.2 |
| CVE-2007-5045 | – | Sep 24 | Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute… Affected: through 7.1.5 |
| CVE-2007-2396 | – | Jul 15 | The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted… Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +5 more |
| CVE-2007-2402 | – | Jul 15 | QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via… Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +5 more |
| CVE-2007-2397 | – | Jul 15 | QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via… Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +5 more |
| CVE-2007-2394 | – | Jul 15 | Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author… Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +5 more |
| CVE-2007-2393 | – | Jul 15 | The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly… Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +5 more |
| CVE-2007-2392 | – | Jul 15 | Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via a crafted movie file that triggers memory corruption Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +5 more |
| CVE-2007-2389 | – | May 29 | Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not clear potentially sensitive memory before use, which allows remote attackers to read memory from a web browser via… Affected: 7.1.6 |
| CVE-2007-2388 | – | May 29 | Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page… Affected: 7.1.6 |
| CVE-2007-0754 | – | May 14 | Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor (STSD) atom… Affected: through 7.1.2 |
| CVE-2007-2296 | – | Apr 26 | Integer overflow in the FlipFileTypeAtom_BtoN function in Apple Quicktime 7.1.5, and other versions before 7.2, allows remote attackers to execute arbitrary code via a crafted M4V… Affected: 7.1; 7.1.1; 7.1.2; 7.1.3; 7.1.4; 7.1.5 |
| CVE-2007-2295 | – | Apr 26 | Heap-based buffer overflow in the JVTCompEncodeFrame function in Apple Quicktime 7.1.5 and other versions before 7.2 allows remote attackers to execute arbitrary code via a… Affected: 7.1; 7.1.1; 7.1.2; 7.1.3; 7.1.4; 7.1.5 |
| CVE-2007-0714 | – | Mar 5 | Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted… Affected: through 7.1.4; 3.0; 4.1.2; 5.0.1; 5.0.2; 6.0; +34 more |
| CVE-2007-0713 | – | Mar 5 | Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +4 more |
| CVE-2007-0712 | – | Mar 5 | Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… Affected: through 7.1.4; 3.0; 4.1.2; 5.0.1; 5.0.2; 6.0; +34 more |
| CVE-2007-0711 | – | Mar 5 | Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating systems, allows remote user-assisted attackers to cause a denial of service (crash) and… Affected: through 7.1.4; 3.0; 4.1.2; 5.0.1; 5.0.2; 6.0; +21 more |
| CVE-2007-0718 | – | Mar 5 | Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +4 more |
| CVE-2007-0717 | – | Mar 5 | Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QTIF… Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +4 more |
| CVE-2007-0716 | – | Mar 5 | Stack-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +4 more |
| CVE-2007-0715 | – | Mar 5 | Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +4 more |