PT-2004-1999 · Apple · Apple Quicktime

John Heasman · Published 2004-10-28 · Updated 2008-09-10 · CVE-2004-0988

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Apple QuickTime versions prior to 6.5.2

Description: The issue is related to an integer overflow that occurs when running Apple QuickTime on Windows systems. This can be triggered by certain inputs, leading to a denial of service due to excessive memory consumption.

Recommendations: For Apple QuickTime versions prior to 6.5.2, update to version 6.5.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-0988

Affected Products

Apple Quicktime

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2004-0988 · Security Note
• http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html · Vendor Advisory