CVE-2006-4384
medium · 5.1Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64 chunk in a FLIC (FLC) movie.
5.1
CVSS
16.2%
EPSS (exploit prob.)
97th
EPSS percentile
2006-09-12
Published
AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| apple | quicktime | <= 7.1.2 |
| apple | quicktime | 5.0 |
| apple | quicktime | 5.0.1 |
| apple | quicktime | 5.0.2 |
| apple | quicktime | 6.0 |
| apple | quicktime | 6.1 |
| apple | quicktime | 6.5 |
| apple | quicktime | 6.5.1 |
| apple | quicktime | 6.5.2 |
| apple | quicktime | 6.5.2 |
| apple | quicktime | 6.5.2 |
| apple | quicktime | 7.0 |
| apple | quicktime | 7.0 |
| apple | quicktime | 7.0.1 |
| apple | quicktime | 7.0.1 |
| apple | quicktime | 7.0.1 |
| apple | quicktime | 7.0.1 |
| apple | quicktime | 7.0.2 |
| apple | quicktime | 7.0.2 |
| apple | quicktime | 7.0.3 |
| apple | quicktime | 7.0.4 |
| apple | quicktime | 7.1.1 |
Check a specific version with /api/v1/cve/match.
References
- http://docs.info.apple.com/article.html?artnum=304357
- http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html
- http://secunia.com/advisories/21893
- http://secunia.com/advisories/29182
- http://security.gentoo.org/glsa/glsa-200803-08.xml
- http://securityreason.com/securityalert/1554
- http://securitytracker.com/id?1016830
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=413
- http://www.kb.cert.org/vuls/id/489836
- http://www.osvdb.org/28771
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=24
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=25
- http://www.securityfocus.com/archive/1/445888/100/0/threaded
- http://www.securityfocus.com/archive/1/446134/100/0/threaded
- http://www.securityfocus.com/bid/19976
- http://www.vupen.com/english/advisories/2006/3577
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28930
- http://docs.info.apple.com/article.html?artnum=304357
- http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html
- http://secunia.com/advisories/21893
- http://secunia.com/advisories/29182
- http://security.gentoo.org/glsa/glsa-200803-08.xml
- http://securityreason.com/securityalert/1554
- http://securitytracker.com/id?1016830
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=413
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2006-4384