CVE-2014-1250
Apple QuickTime < 7.7.5 - Remote Code Execution via Crafted ttfo Element
Title source: llmDescription
Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted ttfo element in a movie file.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT6150
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT6151
Scores
EPSS
0.0362
EPSS Percentile
88.1%
Details
CWE
CWE-119
Status
published
Products (45)
apple/quicktime
7.0.0
apple/quicktime
7.0.1
apple/quicktime
7.0.2
apple/quicktime
7.0.3
apple/quicktime
7.0.4
apple/quicktime
7.1.0
apple/quicktime
7.1.1
apple/quicktime
7.1.2
apple/quicktime
7.1.3
apple/quicktime
7.1.4
... and 35 more
Published
Feb 27, 2014
Tracked Since
Feb 18, 2026