QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, and CVE-2015-5753.
CVSS Vector
AV:N/AC:L/Au:N/C:P/I:P/A:PApple Mac Os X
OSApple≤ 10.10.4Apple Quicktime
APPApple7.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEDoS
CWE
References
Related vulnerabilities
CVE-2021-1871CRITICAL9.8⚠ KEVPL ✓same product
Zdalne wykonanie kodu przez błąd logiczny w systemach Apple (RCE)
CVE-2021-1870CRITICAL9.8⚠ KEVPL ✓same product
Zdalne wykonanie kodu (RCE) w Apple iOS, iPadOS i macOS
CVE-2016-4171CRITICAL9.8⚠ KEVPL ✓same product
RCE w Adobe Flash Player 21.0.0.242 i wcześniejszych — aktywnie exploitowany
CVE-2016-1019CRITICAL9.8⚠ KEVPL ✓same product
Adobe Flash Player — RCE lub DoS przez nieokreślone wektory ataku
CVE-2015-5119CRITICAL9.8⚠ KEVPL ✓same product
Adobe Flash Player — use-after-free w klasie ByteArray umożliwia RCE