7.5
CVE-2005-2340
- EPSS 25.51%
- Veröffentlicht 31.12.2005 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:14:43
- Quelle cret@cert.org
- CVE-Watchlists
- Unerledigt
LoginHeap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 25.51% | 0.977 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
http://docs.info.apple.com/article.html?artnum=303101
http://secunia.com/advisories/18370
http://www.securityfocus.com/archive/1/421547/100/0/threaded
http://www.us-cert.gov/cas/techalerts/TA06-011A.html
http://www.vupen.com/english/advisories/2006/0128
http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0392.html
http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0398.html
http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0402.html
http://securityreason.com/securityalert/332
http://securitytracker.com/id?1015463
http://www.cirt.dk/advisories/cirt-41-advisory.pdf
http://www.kb.cert.org/vuls/id/629845
http://www.kb.cert.org/vuls/id/687201
http://www.osvdb.org/22333
http://www.osvdb.org/22334
http://www.osvdb.org/22335
http://www.securityfocus.com/archive/1/421566/100/0/threaded
http://www.securityfocus.com/bid/16202
http://www.securityfocus.com/bid/16212
https://exchange.xforce.ibmcloud.com/vulnerabilities/24054