PT-2011-4339

CVE-2011-3247

Publicado

2011-10-27

Atualizado

2017-09-19

Descrição por

CVSS 2.0

9.3

Alta

MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1

Description The issue is related to an integer overflow in Apple QuickTime, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted PICT file. This can lead to application crashes or potentially more severe consequences.

Recommendations For Apple QuickTime versions prior to 7.7.1, update to version 7.7.1 or later to resolve the issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Luigi Auriemma

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-189

Identificadores relacionados

CVE-2011-3247