Vulnerabilities > CVE-2010-1819 - Unspecified vulnerability in Apple Quicktime

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

apple

nessus

NVD

Published: 2013-12-27

Updated: 2024-11-21

Summary

Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) CoreVideo.dll, (2) CoreGraphics.dll, or (3) CoreAudioToolbox.dll that is located in the same folder as a .pic image file.

Vulnerable Configurations

Part	Description	Count
Application	Apple Apple Quicktime 7.6.1 Apple Quicktime - Apple Quicktime 3 Apple Quicktime 3.0 Apple Quicktime 4.1.2 Apple Quicktime 5.0 Apple Quicktime 5.0.1 Apple Quicktime 5.0.2 Apple Quicktime 6.0 Apple Quicktime 6.0.0 Apple Quicktime 6.0.1 Apple Quicktime 6.0.2 Apple Quicktime 6.1 Apple Quicktime 6.1.0 Apple Quicktime 6.1.1 Apple Quicktime 6.2.0 Apple Quicktime 6.3.0 Apple Quicktime 6.4.0 Apple Quicktime 6.5 Apple Quicktime 6.5.0 Apple Quicktime 6.5.1 Apple Quicktime 6.5.2 Apple Quicktime 7.0 Apple Quicktime 7.0.0 Apple Quicktime 7.0.1 Apple Quicktime 7.0.2 Apple Quicktime 7.0.3 Apple Quicktime 7.0.4 Apple Quicktime 7.0.8 Apple Quicktime 7.1 Apple Quicktime 7.1.0 Apple Quicktime 7.1.1 Apple Quicktime 7.1.2 Apple Quicktime 7.1.3 Apple Quicktime 7.1.4 Apple Quicktime 7.1.5 Apple Quicktime 7.1.6 Apple Quicktime 7.2 Apple Quicktime 7.2.0 Apple Quicktime 7.2.1 Apple Quicktime 7.3 Apple Quicktime 7.3.0 Apple Quicktime 7.3.1 Apple Quicktime 7.3.1.70 Apple Quicktime 7.4 Apple Quicktime 7.4.0 Apple Quicktime 7.4.1 Apple Quicktime 7.4.5 Apple Quicktime 7.5.0 Apple Quicktime 7.5.5 Apple Quicktime 7.6.0 Apple Quicktime 7.6.2 Apple Quicktime 7.6.5 Apple Quicktime 7.6.6 Apple Quicktime 7.6.7	121

Nessus

NASL family	Windows
NASL id	QUICKTIME_768.NASL
description	The version of QuickTime installed on the remote Windows host is older than 7.6.8. Such versions are reportedly affected by two vulnerabilities : - An input validation issue in the QTPlugin.ocx ActiveX control could allow an attacker to force the application to jump to a location in memory controlled by the attacker through the optional
last seen	2020-06-01
modified	2020-06-02
plugin id	49260
published	2010-09-16
reporter	This script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/49260
title	QuickTime < 7.6.8 Multiple Vulnerabilities (Windows)

Summary

Vulnerable Configurations

Nessus

References