PT-2005-2125 · Apple · Quicktime For Windows

Liquid · Publicado 2005-04-13 · Atualizado 2016-10-18 · CVE-2005-1106

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions QuickTime for Windows version 6.5.2

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by utilizing a GIF image with the maximum depth start value. This could potentially trigger an integer overflow.

Recommendations For QuickTime for Windows version 6.5.2, consider avoiding the use of GIF images with the maximum depth start value to minimize the risk of application crash until a patch is available.

Correção

Identificadores relacionados

CVE-2005-1106

Produtos afetados

Quicktime For Windows

Referências · 2

• http://marc.info/?l=bugtraq&m=111335498626164&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1106 · Nota de Segurança