Lucene search

K
nvd[email protected]NVD:CVE-2011-0252
HistoryAug 04, 2011 - 2:45 a.m.

CVE-2011-0252

2011-08-0402:45:32
CWE-119
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.112 Low

EPSS

Percentile

95.2%

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STTS atoms in a QuickTime movie file.

Affected configurations

NVD
Node
applequicktimeRangeโ‰ค7.6.9
OR
applequicktimeMatch7.0.0
OR
applequicktimeMatch7.0.1
OR
applequicktimeMatch7.0.2
OR
applequicktimeMatch7.0.3
OR
applequicktimeMatch7.0.4
OR
applequicktimeMatch7.1.0
OR
applequicktimeMatch7.1.1
OR
applequicktimeMatch7.1.2
OR
applequicktimeMatch7.1.3
OR
applequicktimeMatch7.1.4
OR
applequicktimeMatch7.1.5
OR
applequicktimeMatch7.1.6
OR
applequicktimeMatch7.2.0
OR
applequicktimeMatch7.2.1
OR
applequicktimeMatch7.3.0
OR
applequicktimeMatch7.3.1
OR
applequicktimeMatch7.3.1.70
OR
applequicktimeMatch7.4.0
OR
applequicktimeMatch7.4.1
OR
applequicktimeMatch7.4.5
OR
applequicktimeMatch7.5.0
OR
applequicktimeMatch7.5.5
OR
applequicktimeMatch7.6.0
OR
applequicktimeMatch7.6.1
OR
applequicktimeMatch7.6.2
OR
applequicktimeMatch7.6.5
OR
applequicktimeMatch7.6.6
OR
applequicktimeMatch7.6.7
OR
applequicktimeMatch7.6.8
OR
applequicktimeMatch7.66.71.0
OR
applequicktimeMatch7.67.75.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.112 Low

EPSS

Percentile

95.2%