Lucene search
HistoryDec 09, 2010 - 8:00 p.m.
CVE-2010-1508
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.073
Percentile
94.1%
Heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Track Header (aka tkhd) atoms.
Affected configurations
Node
applequicktimeRange≤7.6.8
ORapplequicktimeMatch3.0
ORapplequicktimeMatch4.1.2
ORapplequicktimeMatch5.0
ORapplequicktimeMatch5.0.1
ORapplequicktimeMatch5.0.2
ORapplequicktimeMatch6.0
ORapplequicktimeMatch6.0.0
ORapplequicktimeMatch6.0.1
ORapplequicktimeMatch6.0.2
ORapplequicktimeMatch6.1
ORapplequicktimeMatch6.1.0
ORapplequicktimeMatch6.1.1
ORapplequicktimeMatch6.2.0
ORapplequicktimeMatch6.3.0
ORapplequicktimeMatch6.4.0
ORapplequicktimeMatch6.5
ORapplequicktimeMatch6.5.0
ORapplequicktimeMatch6.5.1
ORapplequicktimeMatch6.5.2
ORapplequicktimeMatch7.0
ORapplequicktimeMatch7.0.0
ORapplequicktimeMatch7.0.1
ORapplequicktimeMatch7.0.2
ORapplequicktimeMatch7.0.3
ORapplequicktimeMatch7.0.4
ORapplequicktimeMatch7.1
ORapplequicktimeMatch7.1.0
ORapplequicktimeMatch7.1.1
ORapplequicktimeMatch7.1.2
ORapplequicktimeMatch7.1.3
ORapplequicktimeMatch7.1.4
ORapplequicktimeMatch7.1.5
ORapplequicktimeMatch7.1.6
ORapplequicktimeMatch7.2
ORapplequicktimeMatch7.2.0
ORapplequicktimeMatch7.2.1
ORapplequicktimeMatch7.3
ORapplequicktimeMatch7.3.0
ORapplequicktimeMatch7.3.1
ORapplequicktimeMatch7.3.1.70
ORapplequicktimeMatch7.4
ORapplequicktimeMatch7.4.0
ORapplequicktimeMatch7.4.1
ORapplequicktimeMatch7.4.5
ORapplequicktimeMatch7.5.0
ORapplequicktimeMatch7.5.5
ORapplequicktimeMatch7.6.0
ORapplequicktimeMatch7.6.1
ORapplequicktimeMatch7.6.2
ORapplequicktimeMatch7.6.5
ORapplequicktimeMatch7.6.6
ORapplequicktimeMatch7.6.7
microsoftwindows
References
Related
securityvulns
securityvulns
Secunia Research: QuickTime Track Dimensions Buffer Overflow Vulnerability
2010-12-12 00:00:00
About the security content of QuickTime 7.6.9
2010-12-12 00:00:00
Apple QuickTime multiple security vulnerabilities
2011-07-04 00:00:00
zdi
zdi
Apple QuickTime 3GP Parsing Remote Code Execution Vulnerability
2010-12-07 00:00:00
cvelist
cvelist
CVE-2010-1508
2010-12-09 19:00:00
prion
prion
Heap overflow
2010-12-09 20:00:00
cve
cve
CVE-2010-1508
2010-12-09 20:00:16
openvas
openvas
Apple QuickTime Multiple vulnerabilities - Dec10 (Windows)
2010-12-29 00:00:00
Apple QuickTime Multiple Vulnerabilities (Dec 2010) - Windows
2010-12-29 00:00:00
nessus
nessus
QuickTime < 7.6.9 Multiple Vulnerabilities
2010-12-07 00:00:00
QuickTime < 7.6.9 Multiple Vulnerabilities (Windows)
2010-12-07 00:00:00
QuickTime < 7.6.9 Multiple Vulnerabilities
2010-12-07 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.073
Percentile
94.1%
Related for NVD:CVE-2010-1508