CVE-2011-0209
QuickTime < 7.7.0 - Remote Code Execution via Crafted RIFF WAV File
Title source: llmDescription
Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RIFF WAV file.
References (3)
Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT4723
Patch, Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
Mailing List, Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html
Scores
EPSS
0.0292
EPSS Percentile
85.3%
Details
CWE
CWE-190
Status
published
Products (2)
apple/mac_os_x
< 10.6.8
apple/quicktime
< 7.7.0
Published
Jun 24, 2011
Tracked Since
Feb 18, 2026