Apple Quicktime vulnerabilities
235 known vulnerabilities affecting apple/quicktime.
Total CVEs
235
CISA KEV
0
Public exploits
23
Exploited in wild
3
Severity breakdown
CRITICAL118HIGH20MEDIUM95LOW2
Vulnerabilities
Page 8 of 12
CVE-2008-1020P3MEDIUMCVSS 6.8≤ 7.4.42008-04-04
CVE-2008-1020 [MEDIUM] CWE-119 CVE-2008-1020: Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote
Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak encoding, related to error checking and error messages.
nvd
CVE-2008-1019P3MEDIUMCVSS 6.8≤ 7.4.42008-04-04
CVE-2008-1019 [MEDIUM] CWE-119 CVE-2008-1019: Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers
Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted PICT image file, related to an improperly terminated memory copy loop.
nvd
CVE-2008-0033P3CRITICALCVSS 9.3≤ 7.3.1.702008-01-16
CVE-2008-0033 [CRITICAL] CWE-399 CVE-2008-0033: Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of
Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file with Image Descriptor (IDSC) atoms containing an invalid atom size, which triggers memory corruption.
nvd
CVE-2005-3713P4HIGHCVSS 7.5≤ 7.0.3v7.0+2 more2005-12-31
CVE-2005-3713 [HIGH] CWE-119 CVE-2005-3713: Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitr
Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application Extension Block that modifies the heap in the Picture Modifier block.
nvd
CVE-2008-3615P4CRITICALCVSS 9.3fixed in 7.5.52008-09-11
CVE-2008-3615 [CRITICAL] CWE-399 CVE-2008-3615: ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTi
ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
nvd
CVE-2015-3667P3MEDIUMCVSS 6.8≤ 7.7.62015-07-03
CVE-2015-3667 [MEDIUM] CVE-2015-3667: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other produc
QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3668.
nvdapple
CVE-2015-5751P3MEDIUMCVSS 6.8v7.0.02015-08-17
CVE-2015-5751 [MEDIUM] CVE-2015-5751: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5753, and CVE-2015-5779.
nvdapple
CVE-2015-5753P3MEDIUMCVSS 6.8v7.0.02015-08-17
CVE-2015-5753 [MEDIUM] CVE-2015-5753: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, and CVE-2015-5779.
nvd
CVE-2015-3779P3MEDIUMCVSS 6.8v7.0.02015-08-16
CVE-2015-3779 [MEDIUM] CVE-2015-3779: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.
nvd
CVE-2015-3765P3MEDIUMCVSS 6.8v7.0.02015-08-16
CVE-2015-3765 [MEDIUM] CWE-119 CVE-2015-3765: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.
nvd
CVE-2015-3664P3MEDIUMCVSS 6.8≤ 7.7.62015-07-03
CVE-2015-3664 [MEDIUM] CWE-119 CVE-2015-3664: QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary cod
QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3665 and CVE-2015-3669.
nvdapple
CVE-2015-3669P3MEDIUMCVSS 6.8≤ 7.7.62015-07-03
CVE-2015-3669 [MEDIUM] CVE-2015-3669: QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary cod
QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3664 and CVE-2015-3665.
nvdapple
CVE-2015-3665P3MEDIUMCVSS 6.8≤ 7.7.62015-07-03
CVE-2015-3665 [MEDIUM] CVE-2015-3665: QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary cod
QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3664 and CVE-2015-3669.
nvdapple
CVE-2007-4673P4CRITICALCVSS 9.3v7.22007-10-04
CVE-2007-4673 [CRITICAL] CVE-2007-4673: Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote a
Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file. NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045.
nvd
CVE-2005-2743P4HIGHCVSS 7.5v6.5.22005-10-26
CVE-2005-2743 [HIGH] CVE-2005-2743: The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets
The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary functions in system libraries, which allows remote attackers to execute arbitrary code.
nvd
CVE-2007-0711P4CRITICALCVSS 9.3≤ 7.1.4v3.0+25 more2007-03-05
CVE-2007-0711 [CRITICAL] CWE-189 CVE-2007-0711: Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating systems, allow
Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating systems, allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP video file.
nvd
CVE-2008-1015P4MEDIUMCVSS 6.8≤ 7.4.42008-04-04
CVE-2008-1015 [MEDIUM] CWE-119 CVE-2008-1015: Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote at
Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.
nvd
CVE-2008-1581P4MEDIUMCVSS 6.8≤ 7.4.52008-06-10
CVE-2008-1581 [MEDIUM] CWE-119 CVE-2008-1581: Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause
Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted packed scanlines in PixData structures in a PICT image.
nvd
CVE-2015-5786P4MEDIUMCVSS 6.8≤ 7.7.72015-08-25
CVE-2015-5786 [MEDIUM] CVE-2015-5786: Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of
Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-5785.
nvdapple
CVE-2015-3666P4MEDIUMCVSS 6.8≤ 7.7.62015-07-03
CVE-2015-3666 [MEDIUM] CVE-2015-3666: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other produc
QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3667, and CVE-2015-3668.
nvdapple