CVE-2012-3722

CWE-3993 documents3 sources
Severity
6.8MEDIUM
EPSS
2.1%
top 15.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple Iphone OSApple MAC OS XApple MAC OS X Server
Timeline
PublishedSep 20
Latest updateMay 17

Description

The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶NVDapple/mac_os_x10.7.4+70
▶NVDapple/iphone_os5.1.1+39
▶NVDapple/mac_os_x_server10.7.4+70

🔴Vulnerability Details

2
GHSA
GHSA-2m32-q4rj-65v2: The Sorenson codec in QuickTime in Apple Mac OS X before 10↗2022-05-17
▶
CVEList
CVE-2012-3722: The Sorenson codec in QuickTime in Apple Mac OS X before 10↗2012-09-20
▶