Apple Quicktime vulnerabilities
235 known vulnerabilities affecting apple/quicktime.
Total CVEs
235
CISA KEV
0
Public exploits
23
Exploited in wild
3
Severity breakdown
CRITICAL118HIGH20MEDIUM95LOW2
Vulnerabilities
Page 8 of 12
CVE-2008-3615P4CRITICALCVSS 9.3fixed in 7.5.52008-09-11
CVE-2008-3615 [CRITICAL] CWE-399 CVE-2008-3615: ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTi
ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
nvd
CVE-2015-3789P3MEDIUMCVSS 6.8v7.0.02015-08-17
CVE-2015-3789 [MEDIUM] CVE-2015-3789: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.
nvdapple
CVE-2015-3791P3MEDIUMCVSS 6.8v7.0.02015-08-17
CVE-2015-3791 [MEDIUM] CVE-2015-3791: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.
nvdapple
CVE-2015-3792P3MEDIUMCVSS 6.8v7.0.02015-08-17
CVE-2015-3792 [MEDIUM] CVE-2015-3792: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.
nvdapple
CVE-2015-3788P3MEDIUMCVSS 6.8v7.0.02015-08-16
CVE-2015-3788 [MEDIUM] CVE-2015-3788: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.
nvdapple
CVE-2015-3790P3MEDIUMCVSS 6.8v7.0.02015-08-17
CVE-2015-3790 [MEDIUM] CVE-2015-3790: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.
nvdapple
CVE-2015-5751P3MEDIUMCVSS 6.8v7.0.02015-08-17
CVE-2015-5751 [MEDIUM] CVE-2015-5751: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5753, and CVE-2015-5779.
nvdapple
CVE-2005-2743P4HIGHCVSS 7.5v6.5.22005-10-26
CVE-2005-2743 [HIGH] CVE-2005-2743: The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets
The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary functions in system libraries, which allows remote attackers to execute arbitrary code.
nvd
CVE-2008-1015P3MEDIUMCVSS 6.8≤ 7.4.42008-04-04
CVE-2008-1015 [MEDIUM] CWE-119 CVE-2008-1015: Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote at
Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.
nvd
CVE-2008-1581P3MEDIUMCVSS 6.8≤ 7.4.52008-06-10
CVE-2008-1581 [MEDIUM] CWE-119 CVE-2008-1581: Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause
Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted packed scanlines in PixData structures in a PICT image.
nvd
CVE-2008-3626P4MEDIUMCVSS 6.8≤ 7.4.5v3.0+26 more2008-09-11
CVE-2008-3626 [MEDIUM] CWE-119 CVE-2008-3626: The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly hand
The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.
nvd
CVE-2015-3667P4MEDIUMCVSS 6.8≤ 7.7.62015-07-03
CVE-2015-3667 [MEDIUM] CVE-2015-3667: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other produc
QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3668.
nvdapple
CVE-2015-5786P4MEDIUMCVSS 6.8≤ 7.7.72015-08-25
CVE-2015-5786 [MEDIUM] CVE-2015-5786: Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of
Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-5785.
nvdapple
CVE-2015-3666P4MEDIUMCVSS 6.8≤ 7.7.62015-07-03
CVE-2015-3666 [MEDIUM] CVE-2015-3666: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other produc
QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3667, and CVE-2015-3668.
nvdapple
CVE-2015-3663P4MEDIUMCVSS 6.8≤ 7.7.62015-07-03
CVE-2015-3663 [MEDIUM] CVE-2015-3663: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other produc
QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3666, CVE-2015-3667, and CVE-2015-3668.
nvdapple
CVE-2015-3668P4MEDIUMCVSS 6.8≤ 7.7.62015-07-03
CVE-2015-3668 [MEDIUM] CVE-2015-3668: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other produc
QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3667.
nvdapple
CVE-2015-3661P4MEDIUMCVSS 6.8≤ 7.7.62015-07-03
CVE-2015-3661 [MEDIUM] CWE-119 CVE-2015-3661: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other produc
QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, CVE-2015-3667, and CVE-2015-3668.
nvdapple
CVE-2015-3662P4MEDIUMCVSS 6.8≤ 7.7.62015-07-03
CVE-2015-3662 [MEDIUM] CVE-2015-3662: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other produc
QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3663, CVE-2015-3666, CVE-2015-3667, and CVE-2015-3668.
nvdapple
CVE-2015-5753P4MEDIUMCVSS 6.8v7.0.02015-08-17
CVE-2015-5753 [MEDIUM] CVE-2015-5753: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, and CVE-2015-5779.
nvd
CVE-2015-3779P4MEDIUMCVSS 6.8v7.0.02015-08-16
CVE-2015-3779 [MEDIUM] CVE-2015-3779: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.
nvd