CVE

Id
38391  
CVE No.
CVE-2009-0956  
Status
Candidate  
Description
Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero.  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
419013 38391 CVE-2009-0956 CONFIRM:http://support.apple.com/kb/HT3591  View
419014 38391 CVE-2009-0956 APPLE:APPLE-SA-2009-06-01-1  View
419015 38391 CVE-2009-0956 URL:http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html  View
419016 38391 CVE-2009-0956 BID:35162  View
419017 38391 CVE-2009-0956 URL:http://www.securityfocus.com/bid/35162  View
419018 38391 CVE-2009-0956 OVAL:oval:org.mitre.oval:def:16188  View
419019 38391 CVE-2009-0956 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16188  View
419020 38391 CVE-2009-0956 SECTRACK:1022314  View
419021 38391 CVE-2009-0956 URL:http://www.securitytracker.com/id?1022314  View
419022 38391 CVE-2009-0956 SECUNIA:35091  View
419023 38391 CVE-2009-0956 URL:http://secunia.com/advisories/35091  View
419024 38391 CVE-2009-0956 VUPEN:ADV-2009-1469  View
419025 38391 CVE-2009-0956 URL:http://www.vupen.com/english/advisories/2009/1469  View
419026 38391 CVE-2009-0956 XF:quicktime-userdata-code-execution(50896)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40842 JVNDB-2009-001848 Apple iPhone OS の Mail コンポーネントにおけるデバイスのネットワークアドレスを判別される脆弱性 Apple iPhone OS の Mail コンポーネントには、HTML 電子メール内のリモート画像を読み込まないオプションが割り当てられていないため、デバイスのネットワークアドレスを判別される脆弱性が存在します。 CVE-2009-0960 38391 7.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001848.html  View