CVE-2006-4384

Опубликовано: 12 сент. 2006

Источник: nvd

CVSS2: 5.1

EPSS Средний

Описание

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64 chunk in a FLIC (FLC) movie.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*

Версия до 7.1.2 (включая)

cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.42613

Средний

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-r95j-86qf-6x3q

github

почти 4 года назад