CVE-2009-0955

no score yetEPSS 9.5%

Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a "sign extension issue."

EPSS: 9.5% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2009-06-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:quicktime

References

http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html
http://osvdb.org/54874
http://secunia.com/advisories/35091
http://support.apple.com/kb/HT3591
http://www.securityfocus.com/bid/35166

Check your stack JSON