CVE-2002-0376 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Quicktime

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
3.8%
top 11.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Quicktime
Timeline
PublishedSep 24
Latest updateApr 30

Description

Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDapple/quicktime5.0.2

Patches

Patch: www.atstake.com ↗Patch: www.atstake.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hm9v-m7w5-9hhj: Buffer overflow in Apple QuickTime 5↗2022-04-30
▶
CVEList
CVE-2002-0376: Buffer overflow in Apple QuickTime 5↗2004-09-01
▶
CVE-2002-0376 — Apple Quicktime vulnerability | cvebase