NVD

Id
47355  
Name
CVE-2009-0006  
Description
Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Cinepak encoded movie file with a crafted MDAT atom that triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-01-21  
Modified Date
2012-02-29  
Seq
2009-0006  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
236717 47355 CVE-2009-0006 20090121 ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability  View
236718 47355 CVE-2009-0006 APPLE-SA-2009-01-21  View
236719 47355 CVE-2009-0006 oval:org.mitre.oval:def:6153  View
236720 47355 CVE-2009-0006 http://support.apple.com/kb/HT3403  View
236721 47355 CVE-2009-0006 20090124 Re: ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability  View
236722 47355 CVE-2009-0006 33388  View
236723 47355 CVE-2009-0006 TA09-022A  View
236724 47355 CVE-2009-0006 ADV-2009-0212  View
236725 47355 CVE-2009-0006 http://www.zerodayinitiative.com/advisories/ZDI-09-007/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40593 JVNDB-2009-001599 Apple QuickTime におけるヒープオーバーフローの脆弱性 Apple QuickTime には、整数符号エラーによるヒープオーバーフローの脆弱性が存在します。 CVE-2009-0006 37437 CVE-2009-0006 47355 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001599.html 2009-01-21 2009-07-08 View