Lucene search
AppleCVE-2010-0528HistoryMar 31, 2010 - 6:30 p.m.
CVE-2010-0528
2010-03-3118:30:00
CWE-119
apple
web.nvd.nist.gov
32
cve-2010-0528
apple quicktime
remote code execution
memory corruption
denial of service
nvd
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.06
Percentile
93.6%
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value.
Affected configurations
Node
applequicktimeRange≤7.6.0-windows
ORapplequicktimeMatch7.0.0-windows
ORapplequicktimeMatch7.0.1-windows
ORapplequicktimeMatch7.0.2-windows
ORapplequicktimeMatch7.0.3-windows
ORapplequicktimeMatch7.0.4-windows
ORapplequicktimeMatch7.1.0-windows
ORapplequicktimeMatch7.1.1-windows
ORapplequicktimeMatch7.1.2-windows
ORapplequicktimeMatch7.1.3-windows
ORapplequicktimeMatch7.1.4-windows
ORapplequicktimeMatch7.1.5-windows
ORapplequicktimeMatch7.1.6-windows
ORapplequicktimeMatch7.2.0-windows
ORapplequicktimeMatch7.2.1-windows
ORapplequicktimeMatch7.3.0-windows
ORapplequicktimeMatch7.3.1-windows
ORapplequicktimeMatch7.4.0-windows
ORapplequicktimeMatch7.4.1-windows
ORapplequicktimeMatch7.4.5-windows
ORapplequicktimeMatch7.5.0-windows
ORapplequicktimeMatch7.5.5-windows
ORapplequicktimeMatch7.6.1-windows
ORapplequicktimeMatch7.6.6-windows
microsoftwindows_7
ORmicrosoftwindows_vista
ORmicrosoftwindows_xpsp2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | quicktime | * | cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:* |
| apple | quicktime | 7.0.0 | cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:* |
| apple | quicktime | 7.0.1 | cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:* |
| apple | quicktime | 7.0.2 | cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:* |
| apple | quicktime | 7.0.3 | cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:* |
| apple | quicktime | 7.0.4 | cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:* |
| apple | quicktime | 7.1.0 | cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:* |
| apple | quicktime | 7.1.1 | cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:* |
| apple | quicktime | 7.1.2 | cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:* |
| apple | quicktime | 7.1.3 | cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:* |
Related
nvd
nvd
CVE-2010-0528
2010-03-31 18:30:00
cvelist
cvelist
CVE-2010-0528
2010-03-31 18:00:00
prion
prion
Memory corruption
2010-03-31 18:30:00
zdi
zdi
securityvulns
securityvulns
ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability
2010-04-05 00:00:00
Apple QuickTime/iTunes multiple security vulnerabilities
2010-04-12 00:00:00
openvas
openvas
Apple QuickTime Multiple Denial Of Service Vulnerabilities - Windows
2010-04-06 00:00:00
Apple QuickTime Multiple Denial Of Service Vulnerabilities (Windows)
2010-04-06 00:00:00
nessus
nessus
QuickTime < 7.6.6 Multiple Vulnerabilities
2009-03-31 00:00:00
QuickTime < 7.6.6 Multiple Vulnerabilities
2009-03-31 00:00:00
QuickTime < 7.6.6 Multiple Vulnerabilities (Windows)
2010-03-31 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.06
Percentile
93.6%
Related for CVE-2010-0528