Apple Quicktime vulnerabilities
235 known vulnerabilities affecting apple/quicktime.
Total CVEs
235
CISA KEV
0
Public exploits
23
Exploited in wild
3
Severity breakdown
CRITICAL118HIGH20MEDIUM95LOW2
Vulnerabilities
Page 4 of 12
CVE-2010-1819P3CRITICALCVSS 9.3≤ 7.6.7v7.6.0+4 more2013-12-27
CVE-2010-1819 [CRITICAL] CVE-2010-1819: Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows loc
Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) CoreVideo.dll, (2) CoreGraphics.dll, or (3) CoreAudioToolbox.dll that is located in the same folder as a .pic image file.
nvd
CVE-2012-0668P3CRITICALCVSS 9.3≤ 7.7.1v3.0+62 more2012-05-16
CVE-2012-0668 [CRITICAL] CWE-119 CVE-2012-0668: Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or
Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding.
nvd
CVE-2007-4707P3CRITICALCVSS 9.3≤ 7.32007-12-15
CVE-2007-4707 [CRITICAL] CWE-119 CVE-2007-4707: Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allo
Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts via a crafted QuickTime movie.
nvd
CVE-2013-1021P3CRITICALCVSS 9.3≤ 7.7.3v3.0+50 more2013-05-24
CVE-2013-1021 [CRITICAL] CWE-119 CVE-2013-1021: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG data in a movie file.
nvd
CVE-2009-0003P3CRITICALCVSS 9.3≤ 7.5.5v3.0+30 more2009-01-21
CVE-2009-0003 [CRITICAL] CWE-119 CVE-2009-0003: Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial o
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value in the _WAVEFORMATEX structure.
nvd
CVE-2013-0987P3CRITICALCVSS 9.3≤ 7.7.3v3.0+50 more2013-05-24
CVE-2013-0987 [CRITICAL] CWE-399 CVE-2013-0987: Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of
Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QTIF file.
nvd
CVE-2013-1015P3CRITICALCVSS 9.3≤ 7.7.3v3.0+50 more2013-05-24
CVE-2013-1015 [CRITICAL] CWE-119 CVE-2013-1015: Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of
Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TeXML file.
nvd
CVE-2009-0006P3CRITICALCVSS 9.3≤ 7.5.5v3.0+43 more2009-01-21
CVE-2009-0006 [CRITICAL] CWE-189 CVE-2009-0006: Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of
Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Cinepak encoded movie file with a crafted MDAT atom that triggers a heap-based buffer overflow.
nvd
CVE-2009-0002P3CRITICALCVSS 9.3≤ 7.5.5v3.0+30 more2009-01-21
CVE-2009-0002 [CRITICAL] CWE-119 CVE-2009-0002: Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial o
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms.
nvd
CVE-2009-0007P3CRITICALCVSS 9.3≤ 7.5.5v3.0+43 more2009-01-21
CVE-2009-0007 [CRITICAL] CWE-119 CVE-2009-0007: Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial o
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms.
nvd
CVE-2008-1022P3MEDIUMCVSS 6.8≤ 7.4.42008-04-04
CVE-2008-1022 [MEDIUM] CWE-119 CVE-2008-1022: Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbit
Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted VR movie with an obji atom of zero size.
nvd
CVE-2012-3758P3CRITICALCVSS 9.3≤ 7.7.2v3.0+49 more2012-11-09
CVE-2012-3758 [CRITICAL] CWE-119 CVE-2012-3758: Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or
Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted transform attribute in a text3GTrack element in a QuickTime TeXML file.
nvd
CVE-2012-0669P3CRITICALCVSS 9.3≤ 7.7.1v3.0+62 more2012-05-16
CVE-2012-0669 [CRITICAL] CWE-119 CVE-2012-0669: Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitr
Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.
nvd
CVE-2010-3801P3CRITICALCVSS 9.3≤ 7.6.8v3.0+50 more2010-12-09
CVE-2010-3801 [CRITICAL] CWE-119 CVE-2010-3801: Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of
Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted FlashPix file.
nvd
CVE-2010-3800P3CRITICALCVSS 9.3≤ 7.6.8v3.0+50 more2010-12-09
CVE-2010-3800 [CRITICAL] CWE-119 CVE-2010-3800: Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of
Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file.
nvd
CVE-2010-4009P3CRITICALCVSS 9.3≤ 7.6.8v3.0+50 more2010-12-09
CVE-2010-4009 [CRITICAL] CWE-189 CVE-2010-4009: Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code o
Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
nvd
CVE-2012-3757P3CRITICALCVSS 9.3≤ 7.7.2v3.0+49 more2012-11-09
CVE-2012-3757 [CRITICAL] CVE-2012-3757: Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of
Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file.
nvd
CVE-2012-0671P3CRITICALCVSS 9.3≤ 7.7.1v3.0+62 more2012-05-16
CVE-2012-0671 [CRITICAL] CWE-94 CVE-2012-0671: Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of
Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .pict file.
nvd
CVE-2011-0246P3CRITICALCVSS 9.3≤ 7.6.9v3.0+52 more2011-08-04
CVE-2011-0246 [CRITICAL] CWE-119 CVE-2011-0246: Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execu
Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.
nvd
CVE-2011-0245P3CRITICALCVSS 9.3≤ 7.6.9v7.0.0+30 more2011-08-04
CVE-2011-0245 [CRITICAL] CWE-119 CVE-2011-0245: Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or c
Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pict file.
nvd