Lucene search

MitreCVE-2009-0002

HistoryJan 21, 2009 - 8:30 p.m.

CVE-2009-0002

2009-01-2120:30:00

CWE-119

mitre

web.nvd.nist.gov

apple quicktime

buffer overflow

cve-2009-0002

denial of service

remote code execution

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.901

Percentile

98.9%

JSON

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms.

Affected configurations

Nvd

Node

applequicktimeRange≤7.5.5

applequicktimeMatch-

applequicktimeMatch3.0

applequicktimeMatch4.1.2

applequicktimeMatch5.0

applequicktimeMatch5.0.1

applequicktimeMatch5.0.2

applequicktimeMatch6.0

applequicktimeMatch6.1

applequicktimeMatch6.5

applequicktimeMatch6.5.1

applequicktimeMatch6.5.2

applequicktimeMatch7.0

applequicktimeMatch7.0.1

applequicktimeMatch7.0.2

applequicktimeMatch7.0.3

applequicktimeMatch7.0.4

applequicktimeMatch7.1

applequicktimeMatch7.1.1

applequicktimeMatch7.1.2

applequicktimeMatch7.1.3

applequicktimeMatch7.1.4

applequicktimeMatch7.1.5

applequicktimeMatch7.1.6

applequicktimeMatch7.2

applequicktimeMatch7.3

applequicktimeMatch7.3.1

applequicktimeMatch7.3.1.70

applequicktimeMatch7.4

applequicktimeMatch7.4.1

applequicktimeMatch7.4.4

applequicktimeMatch7.4.5

applequicktimeMatch7.5

AND

applemac_os_xMatch10.4.9

applemac_os_xMatch10.5

applemac_os_xMatch10.5.1

applemac_os_xMatch10.5.2

applemac_os_xMatch10.5.3

applemac_os_xMatch10.5.4

applemac_os_xMatch10.5.5

microsoftwindows_vista

microsoftwindows_xpsp2

microsoftwindows_xpsp3

VendorProductVersionCPE
applequicktime*cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*
applequicktime-cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*
applequicktime3.0cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*
applequicktime4.1.2cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*
applequicktime5.0cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*
applequicktime5.0.1cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*
applequicktime5.0.2cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*
applequicktime6.0cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*
applequicktime6.1cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*
applequicktime6.5cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	quicktime	*	cpe:2.3:a:apple:quicktime::::::::
apple	quicktime	-	cpe:2.3:a:apple:quicktime:-:::::::*
apple	quicktime	3.0	cpe:2.3:a:apple:quicktime:3.0:::::::*
apple	quicktime	4.1.2	cpe:2.3:a:apple:quicktime:4.1.2:::::::*
apple	quicktime	5.0	cpe:2.3:a:apple:quicktime:5.0:::::::*
apple	quicktime	5.0.1	cpe:2.3:a:apple:quicktime:5.0.1:::::::*
apple	quicktime	5.0.2	cpe:2.3:a:apple:quicktime:5.0.2:::::::*
apple	quicktime	6.0	cpe:2.3:a:apple:quicktime:6.0:::::::*
apple	quicktime	6.1	cpe:2.3:a:apple:quicktime:6.1:::::::*
apple	quicktime	6.5	cpe:2.3:a:apple:quicktime:6.5:::::::*