Lucene search

K
cveMitreCVE-2014-4979
HistoryJul 26, 2014 - 11:11 a.m.

CVE-2014-4979

2014-07-2611:11:57
CWE-119
mitre
web.nvd.nist.gov
31
apple
quicktime
cve-2014-4979
remote code execution
denial of service
memory corruption

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.396

Percentile

97.3%

Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed version number and flags in an mvhd atom.

Affected configurations

Nvd
Node
applequicktime
VendorProductVersionCPE
applequicktimecpe:/a:apple:quicktime::::

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.396

Percentile

97.3%