CVE-2011-0248

QuickTime < 7.7 - Remote Code Execution via Crafted QTL File

Title source: llm

Description

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTL file.

References (1)

Core 1

Core References

Patch, Vendor Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html

Scores

EPSS 0.0302

EPSS Percentile 85.9%

Details

CWE

CWE-119

Status published

Products (50)

apple/quicktime 3.0

apple/quicktime 4.1.2

apple/quicktime 5.0

apple/quicktime 5.0.1

apple/quicktime 5.0.2

apple/quicktime 6.0

apple/quicktime 6.0.0

apple/quicktime 6.0.1

apple/quicktime 6.0.2

apple/quicktime 6.1

... and 40 more

Published Aug 04, 2011

Tracked Since Feb 18, 2026