QU
Product
Quicktime
246
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 9Low 0
Watch
Add Quicktime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-0588 | – | Jan 30 | The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of… Affected: 7.1.3 |
| CVE-2007-0462 | – | Jan 26 | The _GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of… Affected: 7.1.3 |
| CVE-2007-0059 | – | Jan 5 | Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie… Affected: through 7.1.3; 3.0 |
| CVE-2007-0015 | – | Jan 1 | Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI Affected: 7.1.3 |
| CVE-2006-4965 | – | Sep 25 | Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with… Affected: 7.1.3 |
| CVE-2006-4381 | – | Sep 12 | Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie Affected: through 7.1.2; 5.0; 5.0.1; 5.0.2; 6.0; 6.1; +16 more |
| CVE-2006-4389 | – | Sep 12 | Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an… Affected: 5.0.2; 6.0; 6.1; 6.5; 6.5.1; 6.5.2; +8 more |
| CVE-2006-4388 | – | Sep 12 | Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix file Affected: through 7.1.2; 5.0; 5.0.1; 5.0.2; 6.0; 6.1; +16 more |
| CVE-2006-4386 | – | Sep 12 | Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie, a different issue than CVE-2006-4381 Affected: through 7.1.2; 5.0; 5.0.1; 5.0.2; 6.0; 6.1; +16 more |
| CVE-2006-4385 | – | Sep 12 | Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.1; 6.5; +16 more |
| CVE-2006-4384 | – | Sep 12 | Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64 chunk in a FLIC (FLC) movie Affected: through 7.1.2; 5.0; 5.0.1; 5.0.2; 6.0; 6.1; +16 more |
| CVE-2006-4382 | – | Sep 12 | Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote attackers to execute arbitrary code via a crafted QuickTime movie Affected: through 7.1.2; 5.0; 5.0.1; 5.0.2; 6.0; 6.1; +17 more |
| CVE-2006-2238 | – | May 12 | Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted BMP file that triggers the overflow in the ReadBMP… Affected: through 7.0.4; 7.0; 7.0.1; 7.0.2; 7.0.3 |
| CVE-2006-1453 | – | May 12 | Stack-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file containing malformed… Affected: through 7.0.4; 3.0; 4.1.2; 5.0; 5.0.1; 6.0; +17 more |
| CVE-2006-1465 | – | May 12 | Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime AVI video format file Affected: 7.0.3; 7.0.4 |
| CVE-2006-1464 | – | May 12 | Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime MPEG4 (M4P) video format file Affected: 7.0.3; 7.0.4 |
| CVE-2006-1463 | – | May 12 | Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a H.264 (M4V) video format file with a certain modified size value Affected: 7.0.3; 7.0.4 |
| CVE-2006-1462 | – | May 12 | Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime H.264 (M4V) video format file Affected: through 7.0.4; 7.0.0; 7.0.1; 7.0.2; 7.0.3 |
| CVE-2006-1461 | – | May 12 | Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash (SWF) file Affected: through 7.0.4; 7.0; 7.0.1; 7.0.2; 7.0.3 |
| CVE-2006-1460 | – | May 12 | Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime movie (.MOV), as demonstrated via a large size for… Affected: through 7.0.4; 7.0; 7.0.1; 7.0.2; 7.0.3 |
| CVE-2006-1459 | – | May 12 | Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to cause a denial of service or execute arbitrary code via a crafted QuickTime movie (.MOV) Affected: through 7.0.4; 7.0.0; 7.0.1; 7.0.2; 7.0.3 |
| CVE-2006-1458 | – | May 12 | Integer overflow in Apple QuickTime Player before 7.1 allows remote attackers to execute arbitrary code via a crafted JPEG image Affected: 7.0.3; 7.0.4 |
| CVE-2006-1454 | – | May 12 | Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file with malformed image data Affected: 7.0.3; 7.0.4 |
| CVE-2006-1249 | – | Mar 19 | Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix (FPX) image that contains a… Affected: 7.0.3; 7.0.4 |
| CVE-2005-3713 | – | Dec 31 | Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application… Affected: through 7.0.3; 7.0; 7.0.1; 7.0.2 |
| CVE-2005-3711 | – | Dec 31 | Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified (1) "strips" (StripByteCounts) or (2)… Affected: through 7.0.3; 7.0; 7.0.1; 7.0.2 |
| CVE-2005-3710 | – | Dec 31 | Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified image height and width (ImageWidth) tags Affected: through 7.0.3; 7.0; 7.0.1; 7.0.2 |
| CVE-2005-3709 | – | Dec 31 | Integer underflow in Apple Quicktime before 7.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Color Map Entry Size in… Affected: through 7.0.3; 7.0; 7.0.1; 7.0.2 |
| CVE-2005-3708 | – | Dec 31 | Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files Affected: through 7.0.3; 7.0; 7.0.1; 7.0.2 |
| CVE-2005-3707 | – | Dec 31 | Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files Affected: through 7.0.3; 7.0; 7.0.1; 7.0.2 |
| CVE-2005-2340 | – | Dec 31 | Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG… Affected: through 7.0.3; 7.0; 7.0.1; 7.0.2 |
| CVE-2005-4092 | – | Dec 8 | Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attackers to cause a denial of service (crash)… Affected: 7.0.3 |
| CVE-2005-2753 | – | Nov 5 | Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file that causes a sign extension of the length element… Affected: through 7.0.2; 6.5.2; 6.5.2; 7.0; 7.0.1; 7.0.1; +1 more |
| CVE-2005-2756 | – | Nov 5 | Apple QuickTime before 7.0.3 allows user-assisted attackers to overwrite memory and execute arbitrary code via a crafted PICT file that triggers an overflow during expansion Affected: through 7.0.2; 6.5.2; 6.5.2; 7.0; 7.0.1; 7.0.1; +1 more |
| CVE-2005-2755 | – | Nov 5 | Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service (crash) via a crafted file with a missing movie attribute, which leads to a null… Affected: through 7.0.2; 6.5.2; 6.5.2; 7.0; 7.0.1; 7.0.1; +1 more |
| CVE-2005-2754 | – | Nov 5 | Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with "Improper movie attributes." Affected: through 7.0.2; 6.5.2; 6.5.2; 7.0; 7.0.1; 7.0.1; +1 more |
| CVE-2005-2743 | – | Oct 26 | The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary functions in system libraries, which allows remote attackers… Affected: 6.5.2 |
| CVE-2005-1579 | – | May 12 | Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition (.qtz) file that uses… Affected: 7.0 |
| CVE-2004-0988 | – | Mar 1 | Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service (memory consumption) via certain inputs… Affected: 5.0.2; 6.0; 6.1; 6.5; 6.5.1 |
| CVE-2004-0922 | – | Jan 27 | AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write… Affected: 5.0.2; 6.0; 6.1; 6.5; 6.5.1 |
| CVE-2004-0921 | – | Jan 27 | AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets Affected: 5.0.2; 6.0; 6.1; 6.5; 6.5.1 |
| CVE-2004-0431 | – | Jul 7 | Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data… Affected: through 6.5 |
| CVE-2003-0168 | – | Apr 2 | Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL Affected: 5.0; 6.0 |
| CVE-2002-0376 | – | Sep 24 | Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field Affected: 5.0.2 |
| CVE-2002-0252 | – | May 29 | Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header Affected: 5.0.1; 5.0.2 |
| CVE-2001-0198 | – | May 3 | Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag Affected: 4.1.2 |