NVD

Id
69730  
Name
CVE-2005-4092  
Description
Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a .mov file with (1) a Movie Resource atom with a large size value, or (2) an stsd atom with a modified Sample Description Table size value, and possibly other vectors involving media files. NOTE: item 1 was originally identified by CVE-2005-4127 for a pre-patch announcement, and item 2 was originally identified by CVE-2005-4128 for a pre-patch announcement.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-08  
Modified Date
2011-03-07  
Seq
2005-4092  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
360318 69730 CVE-2005-4092 APPLE-SA-2006-01-10  View
360319 69730 CVE-2005-4092 http://www.security-protocols.com/advisory/sp-x21-advisory.txt  View
360320 69730 CVE-2005-4092 334  View
360321 69730 CVE-2005-4092 336  View
360322 69730 CVE-2005-4092 1015356  View
360323 69730 CVE-2005-4092 1015396  View
360324 69730 CVE-2005-4092 1015397  View
360325 69730 CVE-2005-4092 http://www.eeye.com/html/research/upcoming/20051117a.html  View
360326 69730 CVE-2005-4092 http://www.eeye.com/html/research/upcoming/20051117b.html  View
360327 69730 CVE-2005-4092 VU#921193  View
360328 69730 CVE-2005-4092 http://security-protocols.com/advisory/sp-x21-advisory.txt  View
360329 69730 CVE-2005-4092 http://www.security-protocols.com/modules.php?name=News&file=article&sid=3109  View
360330 69730 CVE-2005-4092 http://www.security-protocols.com/modules.php?name=News&file=article&sid=3133  View
360331 69730 CVE-2005-4092 20060111 Updated Advisories - Incorrect CVE Information  View
360332 69730 CVE-2005-4092 20060111 [EEYEB-20051117B] Apple iTunes (QuickTime.qts) Heap Overflow  View
360333 69730 CVE-2005-4092 20060111 [EEYEB-20051117A] Apple QuickTime STSD Atom Heap Overflow  View
360334 69730 CVE-2005-4092 15732  View
360335 69730 CVE-2005-4092 TA06-011A  View
360336 69730 CVE-2005-4092 ADV-2005-3012  View
360337 69730 CVE-2005-4092 ADV-2006-0128  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57804 JVNDB-2005-000858 Apple QuickTime に複数の脆弱性 Apple から QuickTime の複数の脆弱性を修正するバージョン 7.0.4 がリリースされました。 CVE-2005-4092 15294 CVE-2005-4092 69730 N/A http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000858.html 2006-01-12 2009-04-03 View