CVE-2006-2238

no score yetEPSS 7.0%

apple quicktime: no CVSS score yet. EPSS 7.0% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted BMP file that triggers the overflow in the ReadBMP function. NOTE: this issue was originally included as item 3 in CVE-2006-1983, but it has been given a separate identifier because it is a distinct issue.

EPSS: 7.0% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2006-05-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:quicktime

References

http://lists.apple.com/archives/security-announce/2006/May/msg00002.html
http://secunia.com/advisories/20069
http://securitytracker.com/id?1016067
http://www.osvdb.org/24820
http://www.security-protocols.com/sp-x27-advisory.php

Check your stack JSON