Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-0257

high · 9.3

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.

9.3
CVSS
60.1%
EPSS (exploit prob.)
99th
EPSS percentile
2011-08-15
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-189

Affected products

VendorProductAffected versions
applequicktime<= 7.6.9
applequicktime7.0.0
applequicktime7.0.1
applequicktime7.0.2
applequicktime7.0.3
applequicktime7.0.4
applequicktime7.1.0
applequicktime7.1.1
applequicktime7.1.2
applequicktime7.1.3
applequicktime7.1.4
applequicktime7.1.5
applequicktime7.1.6
applequicktime7.2.0
applequicktime7.2.1
applequicktime7.3.0
applequicktime7.3.1
applequicktime7.3.1.70
applequicktime7.4.0
applequicktime7.4.1
applequicktime7.4.5
applequicktime7.5.0
applequicktime7.5.5
applequicktime7.6.0
applequicktime7.6.1
applequicktime7.6.2
applequicktime7.6.5
applequicktime7.6.6
applequicktime7.6.7
applequicktime7.6.8
applequicktime7.66.71.0
applequicktime7.67.75.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-0257