Lucene search
HistoryMar 31, 2010 - 6:30 p.m.
CVE-2010-0527
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
High
EPSS
0.006
Percentile
79.5%
Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
Affected configurations
Node
applequicktimeRange≤7.6.0-windows
ORapplequicktimeMatch7.0.0-windows
ORapplequicktimeMatch7.0.1-windows
ORapplequicktimeMatch7.0.2-windows
ORapplequicktimeMatch7.0.3-windows
ORapplequicktimeMatch7.0.4-windows
ORapplequicktimeMatch7.1.0-windows
ORapplequicktimeMatch7.1.1-windows
ORapplequicktimeMatch7.1.2-windows
ORapplequicktimeMatch7.1.3-windows
ORapplequicktimeMatch7.1.4-windows
ORapplequicktimeMatch7.1.5-windows
ORapplequicktimeMatch7.1.6-windows
ORapplequicktimeMatch7.2.0-windows
ORapplequicktimeMatch7.2.1-windows
ORapplequicktimeMatch7.3.0-windows
ORapplequicktimeMatch7.3.1-windows
ORapplequicktimeMatch7.4.0-windows
ORapplequicktimeMatch7.4.1-windows
ORapplequicktimeMatch7.4.5-windows
ORapplequicktimeMatch7.5.0-windows
ORapplequicktimeMatch7.5.5-windows
microsoftwindows_7
ORmicrosoftwindows_vista
ORmicrosoftwindows_xpsp2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | quicktime | * | cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:* |
| apple | quicktime | 7.0.0 | cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:* |
| apple | quicktime | 7.0.1 | cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:* |
| apple | quicktime | 7.0.2 | cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:* |
| apple | quicktime | 7.0.3 | cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:* |
| apple | quicktime | 7.0.4 | cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:* |
| apple | quicktime | 7.1.0 | cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:* |
| apple | quicktime | 7.1.1 | cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:* |
| apple | quicktime | 7.1.2 | cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:* |
| apple | quicktime | 7.1.3 | cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:* |
Related
securityvulns
securityvulns
VUPEN Security Research - Apple Quicktime PICT Processing Integer Overflow Vulnerability
2010-04-05 00:00:00
Apple QuickTime/iTunes multiple security vulnerabilities
2010-04-12 00:00:00
prion
prion
Integer overflow
2010-03-31 18:30:00
cvelist
cvelist
CVE-2010-0527
2010-03-31 18:00:00
cve
cve
CVE-2010-0527
2010-03-31 18:30:00
openvas
openvas
Apple QuickTime Multiple Denial Of Service Vulnerabilities - Windows
2010-04-06 00:00:00
Apple QuickTime Multiple Denial Of Service Vulnerabilities (Windows)
2010-04-06 00:00:00
nessus
nessus
QuickTime < 7.6.6 Multiple Vulnerabilities
2009-03-31 00:00:00
QuickTime < 7.6.6 Multiple Vulnerabilities
2009-03-31 00:00:00
QuickTime < 7.6.6 Multiple Vulnerabilities (Windows)
2010-03-31 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
High
EPSS
0.006
Percentile
79.5%
Related for NVD:CVE-2010-0527