← All CVEs

CVE-2013-1017

high · 9.3

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.

9.3
CVSS
32.6%
EPSS (exploit prob.)
98th
EPSS percentile
2013-05-24
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
applequicktime<= 7.7.3
applequicktime3.0
applequicktime4.1.2
applequicktime5.0
applequicktime5.0.1
applequicktime5.0.2
applequicktime6.0
applequicktime6.0.0
applequicktime6.0.1
applequicktime6.0.2
applequicktime6.1
applequicktime6.1.0
applequicktime6.1.1
applequicktime6.2.0
applequicktime6.3.0
applequicktime6.4.0
applequicktime6.5
applequicktime6.5.0
applequicktime6.5.1
applequicktime6.5.2
applequicktime7.0.0
applequicktime7.0.1
applequicktime7.0.2
applequicktime7.0.3
applequicktime7.0.4
applequicktime7.1.0
applequicktime7.1.1
applequicktime7.1.2
applequicktime7.1.3
applequicktime7.1.4
applequicktime7.1.5
applequicktime7.1.6
applequicktime7.2.0
applequicktime7.2.1
applequicktime7.3.0
applequicktime7.3.1
applequicktime7.4.0
applequicktime7.4.1
applequicktime7.4.5
applequicktime7.5.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-1017