Lucene search

MitreCVE-2009-0003

HistoryJan 21, 2009 - 8:30 p.m.

CVE-2009-0003

2009-01-2120:30:00

CWE-119

mitre

web.nvd.nist.gov

cve-2009-0003

apple quicktime

buffer overflow

denial of service

arbitrary code execution

avi movie file

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.454

Percentile

97.5%

JSON

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value in the _WAVEFORMATEX structure.

Affected configurations

Nvd

Node

applequicktimeRange≤7.5.5

applequicktimeMatch-

applequicktimeMatch3.0

applequicktimeMatch4.1.2

applequicktimeMatch5.0

applequicktimeMatch5.0.1

applequicktimeMatch5.0.2

applequicktimeMatch6.0

applequicktimeMatch6.1

applequicktimeMatch6.5

applequicktimeMatch6.5.1

applequicktimeMatch6.5.2

applequicktimeMatch7.0

applequicktimeMatch7.0.1

applequicktimeMatch7.0.2

applequicktimeMatch7.0.3

applequicktimeMatch7.0.4

applequicktimeMatch7.1

applequicktimeMatch7.1.1

applequicktimeMatch7.1.2

applequicktimeMatch7.1.3

applequicktimeMatch7.1.4

applequicktimeMatch7.1.5

applequicktimeMatch7.1.6

applequicktimeMatch7.2

applequicktimeMatch7.3

applequicktimeMatch7.3.1

applequicktimeMatch7.3.1.70

applequicktimeMatch7.4

applequicktimeMatch7.4.1

applequicktimeMatch7.4.4

applequicktimeMatch7.4.5

applequicktimeMatch7.5

AND

applemac_os_xMatch10.4.9

applemac_os_xMatch10.5

applemac_os_xMatch10.5.1

applemac_os_xMatch10.5.2

applemac_os_xMatch10.5.3

applemac_os_xMatch10.5.4

applemac_os_xMatch10.5.5

microsoftwindows_vista

microsoftwindows_xpsp2

VendorProductVersionCPE
applequicktime*cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*
applequicktime-cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*
applequicktime3.0cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*
applequicktime4.1.2cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*
applequicktime5.0cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*
applequicktime5.0.1cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*
applequicktime5.0.2cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*
applequicktime6.0cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*
applequicktime6.1cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*
applequicktime6.5cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	quicktime	*	cpe:2.3:a:apple:quicktime::::::::
apple	quicktime	-	cpe:2.3:a:apple:quicktime:-:::::::*
apple	quicktime	3.0	cpe:2.3:a:apple:quicktime:3.0:::::::*
apple	quicktime	4.1.2	cpe:2.3:a:apple:quicktime:4.1.2:::::::*
apple	quicktime	5.0	cpe:2.3:a:apple:quicktime:5.0:::::::*
apple	quicktime	5.0.1	cpe:2.3:a:apple:quicktime:5.0.1:::::::*
apple	quicktime	5.0.2	cpe:2.3:a:apple:quicktime:5.0.2:::::::*
apple	quicktime	6.0	cpe:2.3:a:apple:quicktime:6.0:::::::*
apple	quicktime	6.1	cpe:2.3:a:apple:quicktime:6.1:::::::*
apple	quicktime	6.5	cpe:2.3:a:apple:quicktime:6.5:::::::*