Skip to content

CVE-2011-0257 Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file tha...

HighCVSS 9.3 EPSS 60.1% Framework module Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.

Affected products

ProductAffected versionsFixed in
apple quicktime <= 7.6.9 No fix listed
apple quicktime = 7.0.0 No fix listed
apple quicktime = 7.0.1 No fix listed
apple quicktime = 7.0.2 No fix listed
apple quicktime = 7.0.3 No fix listed
apple quicktime = 7.0.4 No fix listed
apple quicktime = 7.1.0 No fix listed
apple quicktime = 7.1.1 No fix listed
apple quicktime = 7.1.2 No fix listed
apple quicktime = 7.1.3 No fix listed
apple quicktime = 7.1.4 No fix listed
apple quicktime = 7.1.5 No fix listed
apple quicktime = 7.1.6 No fix listed
apple quicktime = 7.2.0 No fix listed
apple quicktime = 7.2.1 No fix listed
apple quicktime = 7.3.0 No fix listed
apple quicktime = 7.3.1 No fix listed
apple quicktime = 7.3.1.70 No fix listed
apple quicktime = 7.4.0 No fix listed
apple quicktime = 7.4.1 No fix listed
apple quicktime = 7.4.5 No fix listed
apple quicktime = 7.5.0 No fix listed
apple quicktime = 7.5.5 No fix listed
apple quicktime = 7.6.0 No fix listed
apple quicktime = 7.6.1 No fix listed
Show 7 more
ProductAffected versionsFixed in
apple quicktime = 7.6.2 No fix listed
apple quicktime = 7.6.5 No fix listed
apple quicktime = 7.6.6 No fix listed
apple quicktime = 7.6.7 No fix listed
apple quicktime = 7.6.8 No fix listed
apple quicktime = 7.66.71.0 No fix listed
apple quicktime = 7.67.75.0 No fix listed

References