CVE-2011-0256

Apple QuickTime < 7.7 - Remote Code Execution via Crafted Track Run Atoms

Title source: llm

Description

Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted track run atoms in a QuickTime movie file.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://support.apple.com/kb/HT4826

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16097

Scores

EPSS 0.0368

EPSS Percentile 88.5%

Details

CWE

CWE-189

Status published

Products (32)

apple/quicktime 7.0.0

apple/quicktime 7.0.1

apple/quicktime 7.0.2

apple/quicktime 7.0.3

apple/quicktime 7.0.4

apple/quicktime 7.1.0

apple/quicktime 7.1.1

apple/quicktime 7.1.2

apple/quicktime 7.1.3

apple/quicktime 7.1.4

... and 22 more

Published Aug 15, 2011

Tracked Since Feb 18, 2026