CVE-2006-4386

Опубликовано: 12 сент. 2006

Источник: nvd

CVSS2: 5.1

EPSS Средний

Описание

Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie, a different issue than CVE-2006-4381.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*

Версия до 7.1.2 (включая)

cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.2:*:*:*:*:*

cpe:2.3:a:apple:quicktime:6.5.2:*:mac_os_x_10.3:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.3:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.1:*:mac_os_x_10.4:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.29617

Средний

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-53xm-m68r-6v2h

github

почти 4 года назад