Lucene search

K
cveMitreCVE-2009-0001
HistoryJan 21, 2009 - 8:30 p.m.

CVE-2009-0001

2009-01-2120:30:00
CWE-119
mitre
web.nvd.nist.gov
33
cve-2009-0001
buffer overflow
apple quicktime
denial of service
remote code execution
rtsp url

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.2

Confidence

High

EPSS

0.029

Percentile

90.8%

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL.

Affected configurations

Nvd
Node
applequicktimeRange7.5.5
OR
applequicktimeMatch-
OR
applequicktimeMatch3.0
OR
applequicktimeMatch4.1.2
OR
applequicktimeMatch5.0
OR
applequicktimeMatch5.0.1
OR
applequicktimeMatch5.0.2
OR
applequicktimeMatch6.0
OR
applequicktimeMatch6.1
OR
applequicktimeMatch6.5
OR
applequicktimeMatch6.5.1
OR
applequicktimeMatch6.5.2
OR
applequicktimeMatch7.0
OR
applequicktimeMatch7.0.1
OR
applequicktimeMatch7.0.2
OR
applequicktimeMatch7.0.3
OR
applequicktimeMatch7.0.4
OR
applequicktimeMatch7.1
OR
applequicktimeMatch7.1.1
OR
applequicktimeMatch7.1.2
OR
applequicktimeMatch7.1.3
OR
applequicktimeMatch7.1.4
OR
applequicktimeMatch7.1.5
OR
applequicktimeMatch7.1.6
OR
applequicktimeMatch7.2
OR
applequicktimeMatch7.3
OR
applequicktimeMatch7.3.1
OR
applequicktimeMatch7.3.1.70
OR
applequicktimeMatch7.4
OR
applequicktimeMatch7.4.1
OR
applequicktimeMatch7.4.4
OR
applequicktimeMatch7.4.5
OR
applequicktimeMatch7.5
AND
applemac_os_xMatch10.4.9
OR
applemac_os_xMatch10.5
OR
applemac_os_xMatch10.5.1
OR
applemac_os_xMatch10.5.2
OR
applemac_os_xMatch10.5.3
OR
applemac_os_xMatch10.5.4
OR
applemac_os_xMatch10.5.5
OR
microsoftwindows_vista
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp3
VendorProductVersionCPE
applequicktime7.0cpe:/a:apple:quicktime:7.0:::
applequicktime7.1.3cpe:/a:apple:quicktime:7.1.3:::
applequicktime6.5.2cpe:/a:apple:quicktime:6.5.2:::
applequicktime7.4.1cpe:/a:apple:quicktime:7.4.1:::
applequicktime7.5cpe:/a:apple:quicktime:7.5:::
applequicktime6.1cpe:/a:apple:quicktime:6.1:::
applequicktime7.0.4cpe:/a:apple:quicktime:7.0.4:::
applequicktime7.0.2cpe:/a:apple:quicktime:7.0.2:::
applequicktime7.1.5cpe:/a:apple:quicktime:7.1.5:::
applequicktime3.0cpe:/a:apple:quicktime:3.0:::
Rows per page:
1-10 of 331

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.2

Confidence

High

EPSS

0.029

Percentile

90.8%

Related for CVE-2009-0001