Sploitus

38 exploited vulnerabilities in Apple Quicktime

Vulnerabilities with publicly known exploits

Vendors
Microsoft, Apple, Gstreamer, Red Hat, Adobe, Mozilla
With known exploits
38
Affected Microsoft Directx versions
= 7.0, 7.0a, 7.1, 8.1, 8.1b, 9.0, 9.0a, 9.0b, 9.0c
Affected Microsoft Windows 2000 versions
All versions
Affected Apple Quicktime versions
All versions
Affected Apple Darwin Streaming Server versions
≤ 4.1.3g, 4.1.3
Affected Gstreamer Good Plug-ins versions
= 0.10.9, 0.10.10, 0.10.11
Affected Gstreamer Plug-ins versions
= 0.8.5
Affected Apple Itunes versions
= 8.0
Affected Apple Mac Os X versions
≤ 10.11.4, 10.11.3, 10.6.0, 10.6.1, 10.6.2

Vulnerabilities with exploits

Highest CVSS first — 27 of these already have exploit code on Sploitus

CVE-2009-1537 7 exploits
CVSS 10.0 HIGH 2009-05-28FIX AVAILABLE
Microsoft DirectX QuickTime媒体文件解析代码执行漏洞(MS09-028)Microsoft DirectX DirectShow QuickTime movie parsing vulnerability
CVE-2007-0462 1 exploit
CVSS 10.0 HIGH 2007-01-25FIX AVAILABLE
Apple Mac OSX 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption
CVE-2003-0502
CVSS 10.0 HIGH 2003-07-25FIX AVAILABLE
CVE-2003-0426
CVSS 10.0 HIGH 2003-07-25FIX AVAILABLE
CVE-2013-1017 11 exploits
CVSS 9.3 HIGH 2013-05-24FIX AVAILABLE
Apple QuickTime 畸形MOV文件处理缓冲区溢出漏洞(CVE-2013-1017)QuickTime Movie File dref Atom Handling Buffer Overflow
CVE-2012-3755 2 exploits
CVSS 9.3 HIGH 2012-11-09FIX AVAILABLE
Apple QuickTime 7.7.2 - Targa image Buffer OverflowApple QuickTime 7.7.3之前版本多个任意代码执行漏洞
CVE-2012-3753 9 exploits
CVSS 9.3 HIGH 2012-11-09FIX AVAILABLE
Apple QuickTime 7.7.2 MIME Type Buffer OverflowApple QuickTime 7.7.2 MIME Type Buffer Overflow Vulnerability
CVE-2012-3752 9 exploits
CVSS 9.3 HIGH 2012-11-09FIX AVAILABLE
Apple QuickTime TeXML Style Element Buffer OverflowApple QuickTime TeXML Style Element Buffer Overflow
CVE-2012-0663 9 exploits
CVSS 9.3 HIGH 2012-05-16FIX AVAILABLE
Apple QuickTime TeXML Style Element Parsing Buffer OverflowApple QuickTime TeXML Style Element Parsing Buffer Overflow
CVE-2011-0257 14 exploits
CVSS 9.3 HIGH 2011-08-08FIX AVAILABLE
Apple QuickTime PICT PnSize Buffer OverflowQQPLAYER Player 3.2 - PICT PnSize Buffer Overflow Windows (ASLR + DEP Bypass) (Metasploit)
CVE-2010-1818 9 exploits
CVSS 9.3 HIGH 2010-08-31FIX AVAILABLE
Apple QuickTime 7.6.7 - _Marshaled_pUnk Code Execution (Metasploit)Apple QuickTime QTPlugin.ocx _Marshaled_pUnk Code Execution
CVE-2010-1799 3 exploits
CVSS 9.3 HIGH 2010-08-16FIX AVAILABLE
Apple QuickTime 7.6.6 - Invalid SMIL URI Buffer Overflow (Metasploit)Apple QuickTime 7.6.6 Invalid SMIL URI Buffer Overflow
CVE-2009-0955 1 exploit
CVSS 9.3 HIGH 2009-06-02FIX AVAILABLE
Apple QuickTime - Image Description Atom Sign Extension (PoC)
CVE-2009-0951
CVSS 9.3 HIGH 2009-06-02FIX AVAILABLE
CVE-2009-0397
CVSS 9.3 HIGH 2009-02-02FIX AVAILABLE
CVE-2008-4116 1 exploit
CVSS 9.3 HIGH 2008-09-17FIX AVAILABLE
Apple QuickTime 7.5.5 / iTunes 8.0 - Remote Off-by-One Crash
CVE-2007-6166 16 exploits
CVSS 9.3 HIGH 2007-11-28FIX AVAILABLE
Apple QuickTime (Mac OSX) - RTSP Content-Type Overflow (Metasploit)Apple QuickTime 7.3 - RTSP Response Header Buffer Overflow (Metasploit)
CVE-2007-2394 10 exploits
CVSS 9.3 HIGH 2007-07-15FIX AVAILABLE
Apple Quicktime < 7.2 - SMIL Remote Integer Overflow PoCApple QuickTime <= 7.1.5 Information Disclosure and Multiple Code Execution Vulnerabilities
CVE-2016-1848 3 exploits
CVSS 7.8 HIGH 2016-05-20FIX AVAILABLE
Apple QuickTime - MOV File Parsing Memory CorruptionApple QuickTime - .mov Parsing Memory Corruption
CVE-2016-1767 3 exploits
CVSS 7.8 HIGH 2016-03-24FIX AVAILABLE
Apple QuickTime < 7.7.79.80.95 - FPX File Parsing Memory Corruption 1Apple QuickTime 7.7.79.80.95 - .FPX Parsing Memory Corruption (1)
CVE-2016-1768 3 exploits
CVSS 7.8 HIGH 2016-03-24FIX AVAILABLE
Apple QuickTime < 7.7.79.80.95 - FPX File Parsing Memory Corruption 2Apple QuickTime 7.7.79.80.95 - .FPX Parsing Memory Corruption (2)
CVE-2016-1769 3 exploits
CVSS 7.8 HIGH 2016-03-24FIX AVAILABLE
Apple QuickTime < 7.7.79.80.95 - PSD File Parsing Memory CorruptionApple QuickTime 7.7.79.80.95 - .PSD Parsing Memory Corruption
CVE-2007-2175 4 exploits
CVSS 7.6 HIGH 2007-04-24
Apple QTJava - 'toQTPointer()' Arbitrary Memory Access (Metasploit)Apple QTJava toQTPointer() Arbitrary Memory Access
CVE-2008-0778 1 exploit
CVSS 7.5 HIGH 2008-02-14FIX AVAILABLE
QuickTime 7.4.1 - 'QTPlugin.ocx' Multiple Stack Overflow Vulnerabilities
CVE-2006-2238
CVSS 7.5 HIGH 2006-05-12FIX AVAILABLE
CVE-2005-2340 5 exploits
CVSS 7.5 HIGH 2005-12-31FIX AVAILABLE
QuickTime JPEG buffer overflowQuickTime JPEG buffer overflow
CVE-2005-2267
CVSS 7.5 HIGH 2005-07-13FIX AVAILABLE
CVE-2002-0376
CVSS 7.5 HIGH 2002-09-24FIX AVAILABLE
CVE-2010-0520 5 exploits
CVSS 6.8 MEDIUM 2010-03-30FIX AVAILABLE
Apple QuickTime FLI LinePacket - Remote Code Execution VulnerabilityApple QuickTime FLI LinePacket Remote Code Execution Vulnerability
CVE-2007-0059 1 exploit
CVSS 6.8 MEDIUM 2007-01-05FIX AVAILABLE
Apple QuickTime 7.1.3 - 'HREFTrack' Cross-Zone Scripting
CVE-2007-0015 11 exploits
CVSS 6.8 MEDIUM 2007-01-01FIX AVAILABLE
Apple QuickTime 7.1.3 - RTSP URI Buffer Overflow (Metasploit)Apple QuickTime 7.1.3 RTSP URI Buffer Overflow
CVE-2006-4389
CVSS 5.1 MEDIUM 2006-09-12FIX AVAILABLE
CVE-2006-4384 1 exploit
CVSS 5.1 MEDIUM 2006-09-12FIX AVAILABLE
Apple QuickTime 6/7 - '.FLC' Movie COLOR_64 Chunk Overflow
CVE-2006-4381
CVSS 5.1 MEDIUM 2006-09-12FIX AVAILABLE
CVE-2006-4965 1 exploit
CVSS 5.0 MEDIUM 2006-09-24FIX AVAILABLE
Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution
CVE-2003-0425
CVSS 5.0 MEDIUM 2003-07-25FIX AVAILABLE
CVE-2003-0424
CVSS 5.0 MEDIUM 2003-07-25FIX AVAILABLE
CVE-2012-1904 1 exploit
CVSS 4.3 MEDIUM 2012-03-28FIX AVAILABLE
RealPlayer - '.mp4' file handling memory Corruption