CVE-2009-0005

EPSS 4.46%
Veröffentlicht 21.01.2009 20:30:00
Zuletzt bearbeitet 16.06.2026 23:04:03
Erkennungen
Login

Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted H.263 encoded movie file that triggers memory corruption.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

NVD 33 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Quicktime Version <= 7.5.5

   Apple ≫ macOS X Version 10.4.9
   Apple ≫ macOS X Version 10.5
   Apple ≫ macOS X Version 10.5.1
   Apple ≫ macOS X Version 10.5.2
   Apple ≫ macOS X Version 10.5.3
   Apple ≫ macOS X Version 10.5.4
   Apple ≫ macOS X Version 10.5.5
   Microsoft ≫ Windows Vista
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3

Apple ≫ Quicktime Version -

Apple ≫ Quicktime Version 3.0

Apple ≫ Quicktime Version 4.1.2

Apple ≫ Quicktime Version 5.0

Apple ≫ Quicktime Version 5.0.1

Apple ≫ Quicktime Version 5.0.2

Apple ≫ Quicktime Version 6.0

Apple ≫ Quicktime Version 6.1

Apple ≫ Quicktime Version 6.5

Apple ≫ Quicktime Version 6.5.1

Apple ≫ Quicktime Version 6.5.2

Apple ≫ Quicktime Version 7.0

Apple ≫ Quicktime Version 7.0.1

Apple ≫ Quicktime Version 7.0.2

Apple ≫ Quicktime Version 7.0.3

Apple ≫ Quicktime Version 7.0.4

Apple ≫ Quicktime Version 7.1

Apple ≫ Quicktime Version 7.1.1

Apple ≫ Quicktime Version 7.1.2

Apple ≫ Quicktime Version 7.1.3

Apple ≫ Quicktime Version 7.1.4

Apple ≫ Quicktime Version 7.1.5

Apple ≫ Quicktime Version 7.1.6

Apple ≫ Quicktime Version 7.2

Apple ≫ Quicktime Version 7.3

Apple ≫ Quicktime Version 7.3.1

Apple ≫ Quicktime Version 7.3.1.70

Apple ≫ Quicktime Version 7.4

Apple ≫ Quicktime Version 7.4.1

Apple ≫ Quicktime Version 7.4.4

Apple ≫ Quicktime Version 7.4.5

Apple ≫ Quicktime Version 7.5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.46%	0.902

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html

Patch

Vendor Advisory

http://secunia.com/advisories/33632

http://support.apple.com/kb/HT3403

http://www.us-cert.gov/cas/techalerts/TA09-022A.html

US Government Resource

http://www.vupen.com/english/advisories/2009/0212

http://www.securityfocus.com/bid/33386

https://exchange.xforce.ibmcloud.com/vulnerabilities/48158

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6187

https://nvd.nist.gov/vuln/detail/CVE-2009-0005

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0005

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0005

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-0005