CVE

Id
38390  
CVE No.
CVE-2009-0955  
Status
Candidate  
Description
Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a "sign extension issue."  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
418997 38390 CVE-2009-0955 CONFIRM:http://support.apple.com/kb/HT3591  View
418998 38390 CVE-2009-0955 APPLE:APPLE-SA-2009-06-01-1  View
418999 38390 CVE-2009-0955 URL:http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html  View
419000 38390 CVE-2009-0955 BID:35166  View
419001 38390 CVE-2009-0955 URL:http://www.securityfocus.com/bid/35166  View
419002 38390 CVE-2009-0955 OSVDB:54874  View
419003 38390 CVE-2009-0955 URL:http://osvdb.org/54874  View
419004 38390 CVE-2009-0955 OVAL:oval:org.mitre.oval:def:16159  View
419005 38390 CVE-2009-0955 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16159  View
419006 38390 CVE-2009-0955 SECTRACK:1022314  View
419007 38390 CVE-2009-0955 URL:http://www.securitytracker.com/id?1022314  View
419008 38390 CVE-2009-0955 SECUNIA:35091  View
419009 38390 CVE-2009-0955 URL:http://secunia.com/advisories/35091  View
419010 38390 CVE-2009-0955 VUPEN:ADV-2009-1469  View
419011 38390 CVE-2009-0955 URL:http://www.vupen.com/english/advisories/2009/1469  View
419012 38390 CVE-2009-0955 XF:quicktime-image-description-code-exec(50895)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40844 JVNDB-2009-001850 Apple iPhone OS の MPEG-4 ビデオコーデックにおけるサービス運用妨害 (DoS) の脆弱性 Apple iPhone OS の MPEG-4 ビデオコーデックには、MPEG-4 ビデオファイルの処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-0959 38390 7.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001850.html  View