PT-2011-4339

CVE-2011-3247

Published

2011-10-27

Updated

2017-09-19

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.1

Description The issue is related to an integer overflow in Apple QuickTime, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted PICT file. This can lead to application crashes or potentially more severe consequences.

Recommendations For Apple QuickTime versions prior to 7.7.1, update to version 7.7.1 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Luigi Auriemma

Vendors

Affected products

Weakness enumeration

CWE-189

Related identifiers

CVE-2011-3247