Vulnerabilities > Apple > Quicktime > 6.5

DATE CVE VULNERABILITY TITLE RISK
2007-11-07 CVE-2007-2395 Remote Memory Corruption vulnerability in Apple QuickTime Image Description Atom
Unspecified vulnerability in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a crafted image description atom in a movie file, related to "memory corruption."
network
apple
critical
9.3
2007-09-24 CVE-2007-5045 Code Injection vulnerability in multiple products
Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute arbitrary commands via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter containing the Firefox "-chrome" argument.
network
apple mozilla CWE-94
critical
9.3
2007-05-14 CVE-2007-0754 Buffer Overflow vulnerability in Apple QuickTime MOV File STSD Heap
Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor (STSD) atom size in a QuickTime movie.
network
apple
critical
9.3
2007-01-05 CVE-2007-0059 Remote Security vulnerability in QuickTime Player
Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie (.MOV) with an HREF Track (HREFTrack) that contains an automatic action tag with a local URI, which is executed in a local zone during preview, as exploited by a MySpace worm.
network
apple
6.8
2006-09-12 CVE-2006-4389 Overflow and Exception vulnerability in Apple QuickTime
Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an operation on an uninitialized object.
network
high complexity
apple
5.1
2006-09-12 CVE-2006-4388 Overflow and Exception vulnerability in Apple QuickTime
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix file.
network
high complexity
apple
5.1
2006-09-12 CVE-2006-4386 Overflow and Exception vulnerability in Apple QuickTime
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie, a different issue than CVE-2006-4381.
network
high complexity
apple
5.1
2006-09-12 CVE-2006-4385 Overflow and Exception vulnerability in Apple QuickTime
Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image.
network
high complexity
apple
5.1
2006-09-12 CVE-2006-4384 Overflow and Exception vulnerability in Apple QuickTime
Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64 chunk in a FLIC (FLC) movie.
network
high complexity
apple
5.1
2006-09-12 CVE-2006-4382 Overflow and Exception vulnerability in Apple QuickTime
Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote attackers to execute arbitrary code via a crafted QuickTime movie.
network
high complexity
apple
5.1