CVE-2005-2340
apple quicktime: no CVSS score yet. EPSS 26% chance of exploitation in the next 30 days.
Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field.
- EPSS
- 26% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:quicktime
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0392.html
- http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0398.html
- http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0402.html
- http://docs.info.apple.com/article.html?artnum=303101
- http://secunia.com/advisories/18370