Lucene search

K
cveAppleCVE-2012-0667
HistoryMay 16, 2012 - 10:12 a.m.

CVE-2012-0667

2012-05-1610:12:57
CWE-189
apple
web.nvd.nist.gov
104
cve-2012-0667
apple
quicktime
windows
remote attack
arbitrary code execution
denial of service
application crash
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.235

Percentile

96.6%

Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTVR movie file.

Affected configurations

Nvd
Node
applequicktimeRange≀7.7.1
OR
applequicktimeMatch3.0
OR
applequicktimeMatch4.1.2
OR
applequicktimeMatch5.0
OR
applequicktimeMatch5.0.1
OR
applequicktimeMatch5.0.2
OR
applequicktimeMatch6.0
OR
applequicktimeMatch6.0.0
OR
applequicktimeMatch6.0.1
OR
applequicktimeMatch6.0.2
OR
applequicktimeMatch6.1
OR
applequicktimeMatch6.1.0
OR
applequicktimeMatch6.1.1
OR
applequicktimeMatch6.2.0
OR
applequicktimeMatch6.3.0
OR
applequicktimeMatch6.4.0
OR
applequicktimeMatch6.5
OR
applequicktimeMatch6.5.0
OR
applequicktimeMatch6.5.1
OR
applequicktimeMatch6.5.2
OR
applequicktimeMatch7.0
OR
applequicktimeMatch7.0.0
OR
applequicktimeMatch7.0.1
OR
applequicktimeMatch7.0.2
OR
applequicktimeMatch7.0.3
OR
applequicktimeMatch7.0.4
OR
applequicktimeMatch7.1
OR
applequicktimeMatch7.1.0
OR
applequicktimeMatch7.1.1
OR
applequicktimeMatch7.1.2
OR
applequicktimeMatch7.1.3
OR
applequicktimeMatch7.1.4
OR
applequicktimeMatch7.1.5
OR
applequicktimeMatch7.1.6
OR
applequicktimeMatch7.2
OR
applequicktimeMatch7.2.0
OR
applequicktimeMatch7.2.1
OR
applequicktimeMatch7.3
OR
applequicktimeMatch7.3.0
OR
applequicktimeMatch7.3.1
OR
applequicktimeMatch7.3.1.70
OR
applequicktimeMatch7.4
OR
applequicktimeMatch7.4.0
OR
applequicktimeMatch7.4.1
OR
applequicktimeMatch7.4.5
OR
applequicktimeMatch7.5.0
OR
applequicktimeMatch7.5.5
OR
applequicktimeMatch7.6.0
OR
applequicktimeMatch7.6.1
OR
applequicktimeMatch7.6.2
OR
applequicktimeMatch7.6.5
OR
applequicktimeMatch7.6.6
OR
applequicktimeMatch7.6.7
OR
applequicktimeMatch7.6.8
OR
applequicktimeMatch7.6.9
OR
applequicktimeMatch7.7.0
OR
applequicktimeMatch7.60.92.0
OR
applequicktimeMatch7.62.14.0
OR
applequicktimeMatch7.64.17.73
OR
applequicktimeMatch7.65.17.80
OR
applequicktimeMatch7.66.71.0
OR
applequicktimeMatch7.67.75.0
OR
applequicktimeMatch7.68.75.0
OR
applequicktimeMatch7.69.80.9
AND
microsoftwindows
VendorProductVersionCPE
applequicktime7.6.1cpe:/a:apple:quicktime:7.6.1:::
applequicktime6.0.1cpe:/a:apple:quicktime:6.0.1:::
applequicktime7.0cpe:/a:apple:quicktime:7.0:::
applequicktime7.4.0cpe:/a:apple:quicktime:7.4.0:::
applequicktime7.6.0cpe:/a:apple:quicktime:7.6.0:::
applequicktime7.1.3cpe:/a:apple:quicktime:7.1.3:::
applequicktime7.6.7cpe:/a:apple:quicktime:7.6.7:::
applequicktime6.4.0cpe:/a:apple:quicktime:6.4.0:::
applequicktime6.1.0cpe:/a:apple:quicktime:6.1.0:::
applequicktime6.5.2cpe:/a:apple:quicktime:6.5.2:::
Rows per page:
1-10 of 641

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.235

Percentile

96.6%