Quicktime (Apple) - vulnerabilities (CVEs)

246 CVEs, 0 in the last 30 days, 219 known versions, newest CVE from 2017-07-07. Vendor: Apple.

CVEs of Quicktime

CVE-2017-2218 - CVSS 7.8 (high), 2017-07-07: Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified…
CVE-2011-3428 - CVSS 9.8 (critical), 2017-04-24: Buffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute arbitrary code.
CVE-2015-7117 - CVSS 6.6 (medium), 2016-01-09: Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2015-7092 - CVSS 6.6 (medium), 2016-01-09: Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash)…
CVE-2015-7091 - CVSS 6.6 (medium), 2016-01-09: Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2015-7090 - CVSS 6.6 (medium), 2016-01-09: Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2015-7089 - CVSS 6.6 (medium), 2016-01-09: Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2015-7088 - CVSS 6.6 (medium), 2016-01-09: Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2015-7087 - CVSS 6.6 (medium), 2016-01-09: Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2015-7086 - CVSS 6.6 (medium), 2016-01-09: Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2015-7085 - CVSS 6.6 (medium), 2016-01-09: Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2015-5786 - CVSS 6.8 (medium), 2015-08-25: Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2015-5785 - CVSS 6.8 (medium), 2015-08-25: Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2015-5779 - CVSS 7.5 (high), 2015-08-17: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2015-5753 - CVSS 6.8 (medium), 2015-08-17: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2015-5751 - CVSS 6.8 (medium), 2015-08-17: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2015-3792 - CVSS 6.8 (medium), 2015-08-17: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2015-3791 - CVSS 6.8 (medium), 2015-08-17: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2015-3790 - CVSS 6.8 (medium), 2015-08-17: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2015-3789 - CVSS 6.8 (medium), 2015-08-17: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2015-3788 - CVSS 6.8 (medium), 2015-08-16: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2015-3779 - CVSS 6.8 (medium), 2015-08-16: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2015-3765 - CVSS 6.8 (medium), 2015-08-16: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2015-3713 - CVSS 6.8 (medium), 2015-07-03: QuickTime in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted movie…
CVE-2015-3669 - CVSS 6.8 (medium), 2015-07-03: QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
CVE-2015-3668 - CVSS 6.8 (medium), 2015-07-03: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or…
CVE-2015-3667 - CVSS 6.8 (medium), 2015-07-03: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or…
CVE-2015-3666 - CVSS 6.8 (medium), 2015-07-03: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or…
CVE-2015-3664 - CVSS 6.8 (medium), 2015-07-03: QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
CVE-2015-3665 - CVSS 6.8 (medium), 2015-07-03: QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
CVE-2015-3663 - CVSS 6.8 (medium), 2015-07-03: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or…
CVE-2015-3662 - CVSS 6.8 (medium), 2015-07-03: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or…
CVE-2015-3661 - CVSS 6.8 (medium), 2015-07-03: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or…
CVE-2014-4979 - CVSS 9.3 (critical), 2014-07-26: Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed version number and flags in…
CVE-2014-1244 - CVSS 9.3 (critical), 2014-02-27: Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2014-1247 - CVSS 9.3 (critical), 2014-02-27: Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2014-1250 - CVSS 9.3 (critical), 2014-02-27: Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of…
CVE-2014-1243 - CVSS 9.3 (critical), 2014-02-27: Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2014-1246 - CVSS 9.3 (critical), 2014-02-27: Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2014-1249 - CVSS 9.3 (critical), 2014-02-27: Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2014-1245 - CVSS 9.3 (critical), 2014-02-27: Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…
CVE-2014-1248 - CVSS 9.3 (critical), 2014-02-27: Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2014-1251 - CVSS 9.3 (critical), 2014-02-27: Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2010-1819 - CVSS 9.3 (critical), 2013-12-27: Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute…
CVE-2013-1032 - CVSS 6.8 (medium), 2013-09-16: QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2013-0988 - CVSS 9.3 (critical), 2013-05-24: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2013-1016 - CVSS 9.3 (critical), 2013-05-24: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2013-1019 - CVSS 9.3 (critical), 2013-05-24: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2013-1022 - CVSS 9.3 (critical), 2013-05-24: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted…
CVE-2013-0987 - CVSS 9.3 (critical), 2013-05-24: Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QTIF file.
CVE-2013-1015 - CVSS 9.3 (critical), 2013-05-24: Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TeXML file.
CVE-2013-1018 - CVSS 9.3 (critical), 2013-05-24: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2013-1021 - CVSS 9.3 (critical), 2013-05-24: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted…
CVE-2013-0986 - CVSS 9.3 (critical), 2013-05-24: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted…
CVE-2013-0989 - CVSS 9.3 (critical), 2013-05-24: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2013-1017 - CVSS 9.3 (critical), 2013-05-24: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted…
CVE-2013-1020 - CVSS 9.3 (critical), 2013-05-24: Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JPEG data in a…
CVE-2012-3758 - CVSS 9.3 (critical), 2012-11-09: Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2012-3751 - CVSS 9.3 (critical), 2012-11-09: Use-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2012-3754 - CVSS 9.3 (critical), 2012-11-09: Use-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or…
CVE-2012-3757 - CVSS 9.3 (critical), 2012-11-09: Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2011-1374 - CVSS 9.3 (critical), 2012-11-09: Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2012-3753 - CVSS 9.3 (critical), 2012-11-09: Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application…
CVE-2012-3756 - CVSS 9.3 (critical), 2012-11-09: Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2012-3752 - CVSS 9.3 (critical), 2012-11-09: Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash)…
CVE-2012-3755 - CVSS 9.3 (critical), 2012-11-09: Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2012-0670 - CVSS 9.3 (critical), 2012-05-16: Integer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2012-0669 - CVSS 9.3 (critical), 2012-05-16: Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…
CVE-2012-0671 - CVSS 9.3 (critical), 2012-05-16: Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
CVE-2012-0664 - CVSS 9.3 (critical), 2012-05-16: Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2012-0667 - CVSS 9.3 (critical), 2012-05-16: Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2012-0666 - CVSS 9.3 (critical), 2012-05-16: Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of…
CVE-2012-0665 - CVSS 9.3 (critical), 2012-05-16: Heap-based buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…
CVE-2012-0668 - CVSS 9.3 (critical), 2012-05-16: Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2012-0663 - CVSS 9.3 (critical), 2012-05-16: Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service…
CVE-2012-0265 - CVSS 9.3 (critical), 2012-05-16: Stack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2011-3250 - CVSS 9.3 (critical), 2011-10-28: Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2011-3249 - CVSS 9.3 (critical), 2011-10-28: Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
CVE-2011-3251 - CVSS 9.3 (critical), 2011-10-28: Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2011-3247 - CVSS 9.3 (critical), 2011-10-28: Integer overflow in Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…
CVE-2011-3248 - CVSS 9.3 (critical), 2011-10-28: Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…
CVE-2011-0258 - CVSS 9.3 (critical), 2011-09-06: Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)…
CVE-2011-0256 - CVSS 9.3 (critical), 2011-08-15: Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted…
CVE-2011-0257 - CVSS 9.3 (critical), 2011-08-15: Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via…
CVE-2011-0247 - CVSS 9.3 (critical), 2011-08-04: Multiple stack-based buffer overflows in Apple QuickTime before 7.7 on Windows allow remote attackers to execute arbitrary code or cause a denial of service…
CVE-2011-0250 - CVSS 9.3 (critical), 2011-08-04: Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…
CVE-2011-0249 - CVSS 9.3 (critical), 2011-08-04: Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…
CVE-2011-0252 - CVSS 9.3 (critical), 2011-08-04: Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…
CVE-2011-0248 - CVSS 9.3 (critical), 2011-08-04: Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers…
CVE-2011-0251 - CVSS 9.3 (critical), 2011-08-04: Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…
CVE-2011-0246 - CVSS 9.3 (critical), 2011-08-04: Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2011-0245 - CVSS 9.3 (critical), 2011-08-04: Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted…
CVE-2011-0211 - CVSS 6.8 (medium), 2011-06-24: Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application…
CVE-2011-0210 - CVSS 6.8 (medium), 2011-06-24: QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2011-0209 - CVSS 6.8 (medium), 2011-06-24: Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application…
CVE-2011-0213 - CVSS 6.8 (medium), 2011-06-24: Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application…
CVE-2011-0187 - CVSS 4.3 (medium), 2011-03-23: The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data…
CVE-2011-0186 - CVSS 4.3 (medium), 2011-03-23: QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2010-3802 - CVSS 9.3 (critical), 2010-12-09: Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and…
CVE-2010-3801 - CVSS 9.3 (critical), 2010-12-09: Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…