6.8

CVE-2008-1739

Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AppleQuicktime Version <= 7.4.4
AppleQuicktime Version-
AppleQuicktime Version3.0
AppleQuicktime Version5.0
AppleQuicktime Version5.0.1
AppleQuicktime Version5.0.2
AppleQuicktime Version6.0
AppleQuicktime Version6.1
AppleQuicktime Version6.5
AppleQuicktime Version6.5.1
AppleQuicktime Version6.5.2
AppleQuicktime Version7.0
AppleQuicktime Version7.0.1
AppleQuicktime Version7.0.2
AppleQuicktime Version7.0.3
AppleQuicktime Version7.0.4
AppleQuicktime Version7.1
AppleQuicktime Version7.1.1
AppleQuicktime Version7.1.2
AppleQuicktime Version7.1.3
AppleQuicktime Version7.1.4
AppleQuicktime Version7.1.5
AppleQuicktime Version7.1.6
AppleQuicktime Version7.2
AppleQuicktime Version7.3
AppleQuicktime Version7.3.1
AppleQuicktime Version7.3.1.70
AppleQuicktime Version7.4
AppleQuicktime Version7.4.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.26% 0.775
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P