VAR-200511-0173
Vulnerability from variot - Updated: 2025-04-03 22:23Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with "Improper movie attributes.". This issue is due to a failure of the application to properly validate integer signed-ness prior to using it to carry out critical operations. An attacker may leverage this issue to cause the affected QuickTime client to crash, denying service to legitimate users. It has been speculated that this issue may also facilitate code execution; any code execution would occur with the privileges of the user that activated the affected software. This issue affects both Microsoft Windows, and Apple versions of QuickTime.
CVE-ID: CVE-2005-2754
Original location: http://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt
Severity: Critical - remote code execution.
Software affected: QuickTime package 7.0.1 for Mac OS X 10.3 QuickTime package 7.0.1 for Mac OS X 10.4 QuickTime package 6.5.2 for Mac OS X 10.3 QuickTime package 6.5.2 for Mac OS X 10.2 QuickTime package 7* for Windows
Older versions may be also vulnerable.
Note: Following versions are not vulnerable, due to the fact I have reported the vulnerabilities before their releases:
QuickTime package 7.0.2 for Mac OS X 10.3
QuickTime package 7.0.2 for Mac OS X 10.4
- DISCLAIMER
Author takes no responsibility for any actions with provided informations or codes. The copyright for any material created by the author is reserved. Any duplication of codes or texts provided here in electronic or printed publications is not permitted without the author's agreement.
I. BACKGROUND
Apple QuickTime Player is one of the Apple QuickTime components used by hundreds of millions of users.
II.
Improper movie attributes could result in a very large memory copy, which lead to potencial memory overwrite.
III. POC CODE
Due to severity of this bug i will not release any proof of concept codes for this issue.
IV. VENDOR RESPONSE
Vendor (Apple) has been noticed and released all necessary patches.
best regards, Piotr Bania
--
Piotr Bania - bania.piotr@gmail.com - 0xCD, 0x19 Fingerprint: 413E 51C7 912E 3D4E A62A BFA4 1FF6 689F BE43 AC33 http://pb.specialised.info - Key ID: 0xBE43AC33
" Dinanzi a me non fuor cose create
se non etterne, e io etterno duro.
Lasciate ogne speranza, voi ch'intrate "
- Dante, Inferno Canto III
Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ .
TITLE: Apple QuickTime Multiple Vulnerabilities
SECUNIA ADVISORY ID: SA17428
VERIFY ADVISORY: http://secunia.com/advisories/17428/
CRITICAL: Highly critical
IMPACT: DoS, System access
WHERE:
From remote
SOFTWARE: Apple QuickTime 7.x http://secunia.com/product/5090/ Apple Quicktime 6.x http://secunia.com/product/810/
DESCRIPTION: Piotr Bania has reported some vulnerabilities in Apple QuickTime, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a user's system.
1) An integer overflow error exists in the handling of a "Pascal" style string when loading a ".mov" video file.
3) A NULL pointer dereferencing error exists when handling certain missing movie attributes from a video file.
4) A boundary error exists in the QuickTime PictureViewer when decompressing PICT data.
Prior versions may also be affected.
SOLUTION: Update to version 7.0.3. http://www.apple.com/support/downloads/quicktime703.html
PROVIDED AND/OR DISCOVERED BY: Piotr Bania
ORIGINAL ADVISORY: Apple: http://docs.info.apple.com/article.html?artnum=302772
Piotr Bania: http://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt http://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt http://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt http://pb.specialised.info/all/adv/quicktime-pict-adv.txt
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200511-0173",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "quicktime",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "6.5.2"
},
{
"model": "quicktime",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "7.0"
},
{
"model": "quicktime",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "7.0.1"
},
{
"model": "quicktime",
"scope": "lte",
"trust": 1.0,
"vendor": "apple",
"version": "7.0.2"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "apple computer",
"version": null
},
{
"model": "quicktime",
"scope": "eq",
"trust": 0.6,
"vendor": "apple",
"version": "7.0.2"
},
{
"model": "quicktime player",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "7.0.2"
},
{
"model": "quicktime player",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "7.0.1"
},
{
"model": "quicktime player",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "7.0"
},
{
"model": "quicktime player",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "6.5.2"
},
{
"model": "quicktime player",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "6.5.1"
},
{
"model": "quicktime player",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "6.5"
},
{
"model": "quicktime player",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "6.1"
},
{
"model": "quicktime player",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "5.0.2"
},
{
"model": "quicktime player",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "6"
},
{
"model": "quicktime player",
"scope": "ne",
"trust": 0.3,
"vendor": "apple",
"version": "7.0.3"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#855118"
},
{
"db": "BID",
"id": "15308"
},
{
"db": "CNNVD",
"id": "CNNVD-200511-128"
},
{
"db": "NVD",
"id": "CVE-2005-2754"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Piotr Bania",
"sources": [
{
"db": "PACKETSTORM",
"id": "41277"
},
{
"db": "CNNVD",
"id": "CNNVD-200511-128"
}
],
"trust": 0.7
},
"cve": "CVE-2005-2754",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 4.9,
"id": "CVE-2005-2754",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 4.9,
"id": "VHN-13963",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:H/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2005-2754",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#855118",
"trust": 0.8,
"value": "8.61"
},
{
"author": "CNNVD",
"id": "CNNVD-200511-128",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-13963",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#855118"
},
{
"db": "VULHUB",
"id": "VHN-13963"
},
{
"db": "CNNVD",
"id": "CNNVD-200511-128"
},
{
"db": "NVD",
"id": "CVE-2005-2754"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with \"Improper movie attributes.\". This issue is due to a failure of the application to properly validate integer signed-ness prior to using it to carry out critical operations. \nAn attacker may leverage this issue to cause the affected QuickTime client to crash, denying service to legitimate users. It has been speculated that this issue may also facilitate code execution; any code execution would occur with the privileges of the user that activated the affected software. \nThis issue affects both Microsoft Windows, and Apple versions of QuickTime. \n\n\nCVE-ID: \t\tCVE-2005-2754\n\nOriginal location:\nhttp://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt\n\nSeverity: \t\tCritical - remote code execution. \n\nSoftware affected:\tQuickTime package 7.0.1 for Mac OS X 10.3\n\t\t\tQuickTime package 7.0.1 for Mac OS X 10.4\n\t\t\tQuickTime package 6.5.2 for Mac OS X 10.3\n\t\t\tQuickTime package 6.5.2 for Mac OS X 10.2\n\t\t\tQuickTime package 7* for Windows\n\n\t\t\tOlder versions may be also vulnerable. \nNote:\t\t\tFollowing versions are not vulnerable, due to\n\t\t\tthe fact I have reported the vulnerabilities\n\t\t\tbefore their releases:\n\t\n\t\t\tQuickTime package 7.0.2 for Mac OS X 10.3\n\t\t\tQuickTime package 7.0.2 for Mac OS X 10.4\n\n\n\n0. DISCLAIMER\n\nAuthor takes no responsibility for any actions with provided\ninformations or codes. The copyright for any material created by the\nauthor is reserved. Any duplication of codes or texts provided here in\nelectronic or printed publications is not permitted without the author\u0027s\nagreement. \n\nI. BACKGROUND\n\nApple QuickTime Player is one of the Apple QuickTime components\nused by hundreds of millions of users. \n\nII. \n\nImproper movie attributes could result in a very large memory copy,\nwhich lead to potencial memory overwrite. \n\nIII. POC CODE\n\nDue to severity of this bug i will not release any proof of concept\ncodes for this issue. \n\nIV. VENDOR RESPONSE\n\nVendor (Apple) has been noticed and released all necessary patches. \n\t\n\n\n\nbest regards,\nPiotr Bania\n\n-- \n--------------------------------------------------------------------\nPiotr Bania - \u003cbania.piotr@gmail.com\u003e - 0xCD, 0x19\nFingerprint: 413E 51C7 912E 3D4E A62A BFA4 1FF6 689F BE43 AC33\nhttp://pb.specialised.info - Key ID: 0xBE43AC33\n--------------------------------------------------------------------\n\n \" Dinanzi a me non fuor cose create\n se non etterne, e io etterno duro. \n Lasciate ogne speranza, voi ch\u0027intrate \"\n - Dante, Inferno Canto III\n\n_______________________________________________\nFull-Disclosure - We believe in it. \nCharter: http://lists.grok.org.uk/full-disclosure-charter.html\nHosted and sponsored by Secunia - http://secunia.com/\n. \n\nTITLE:\nApple QuickTime Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA17428\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/17428/\n\nCRITICAL:\nHighly critical\n\nIMPACT:\nDoS, System access\n\nWHERE:\n\u003eFrom remote\n\nSOFTWARE:\nApple QuickTime 7.x\nhttp://secunia.com/product/5090/\nApple Quicktime 6.x\nhttp://secunia.com/product/810/\n\nDESCRIPTION:\nPiotr Bania has reported some vulnerabilities in Apple QuickTime,\nwhich can be exploited by malicious people to cause a DoS (Denial of\nService) and potentially to compromise a user\u0027s system. \n\n1) An integer overflow error exists in the handling of a \"Pascal\"\nstyle string when loading a \".mov\" video file. \n\n3) A NULL pointer dereferencing error exists when handling certain\nmissing movie attributes from a video file. \n\n4) A boundary error exists in the QuickTime PictureViewer when\ndecompressing PICT data. \n\nPrior versions may also be affected. \n\nSOLUTION:\nUpdate to version 7.0.3. \nhttp://www.apple.com/support/downloads/quicktime703.html\n\nPROVIDED AND/OR DISCOVERED BY:\nPiotr Bania\n\nORIGINAL ADVISORY:\nApple:\nhttp://docs.info.apple.com/article.html?artnum=302772\n\nPiotr Bania:\nhttp://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt\nhttp://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt\nhttp://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt\nhttp://pb.specialised.info/all/adv/quicktime-pict-adv.txt\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2005-2754"
},
{
"db": "CERT/CC",
"id": "VU#855118"
},
{
"db": "BID",
"id": "15308"
},
{
"db": "VULHUB",
"id": "VHN-13963"
},
{
"db": "PACKETSTORM",
"id": "41277"
},
{
"db": "PACKETSTORM",
"id": "41264"
}
],
"trust": 2.16
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-13963",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-13963"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "SECUNIA",
"id": "17428",
"trust": 2.6
},
{
"db": "NVD",
"id": "CVE-2005-2754",
"trust": 2.1
},
{
"db": "BID",
"id": "15308",
"trust": 2.0
},
{
"db": "VUPEN",
"id": "ADV-2005-2293",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1015152",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "20476",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "20478",
"trust": 0.8
},
{
"db": "CERT/CC",
"id": "VU#855118",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200511-128",
"trust": 0.7
},
{
"db": "BUGTRAQ",
"id": "20051104 ADVISORY: APPLE QUICKTIME PLAYER REMOTE INTEGER OVERFLOW (2)",
"trust": 0.6
},
{
"db": "PACKETSTORM",
"id": "41277",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-13963",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "41264",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#855118"
},
{
"db": "VULHUB",
"id": "VHN-13963"
},
{
"db": "BID",
"id": "15308"
},
{
"db": "PACKETSTORM",
"id": "41277"
},
{
"db": "PACKETSTORM",
"id": "41264"
},
{
"db": "CNNVD",
"id": "CNNVD-200511-128"
},
{
"db": "NVD",
"id": "CVE-2005-2754"
}
]
},
"id": "VAR-200511-0173",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-13963"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T22:23:57.156000Z",
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-189",
"trust": 1.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-13963"
},
{
"db": "NVD",
"id": "CVE-2005-2754"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.9,
"url": "http://docs.info.apple.com/article.html?artnum=302772"
},
{
"trust": 1.9,
"url": "http://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/15308"
},
{
"trust": 1.7,
"url": "http://www.osvdb.org/20476"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1015152"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/17428"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/415709/30/0/threaded"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2005/2293"
},
{
"trust": 0.9,
"url": "http://secunia.com/advisories/17428/"
},
{
"trust": 0.9,
"url": "http://pb.specialised.info/all/adv/quicktime-pict-adv.txt"
},
{
"trust": 0.8,
"url": "http://www.osvdb.org/displayvuln.php?osvdb_id=20478"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/415709/30/0/threaded"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2005/2293"
},
{
"trust": 0.3,
"url": "http://www.apple.com/quicktime/"
},
{
"trust": 0.3,
"url": "http://www.info.apple.com/usen/security/security_updates.html"
},
{
"trust": 0.3,
"url": "/archive/1/415709"
},
{
"trust": 0.1,
"url": "http://pb.specialised.info"
},
{
"trust": 0.1,
"url": "http://secunia.com/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2005-2754"
},
{
"trust": 0.1,
"url": "http://lists.grok.org.uk/full-disclosure-charter.html"
},
{
"trust": 0.1,
"url": "http://www.apple.com/support/downloads/quicktime703.html"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/5090/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/810/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#855118"
},
{
"db": "VULHUB",
"id": "VHN-13963"
},
{
"db": "BID",
"id": "15308"
},
{
"db": "PACKETSTORM",
"id": "41277"
},
{
"db": "PACKETSTORM",
"id": "41264"
},
{
"db": "CNNVD",
"id": "CNNVD-200511-128"
},
{
"db": "NVD",
"id": "CVE-2005-2754"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#855118"
},
{
"db": "VULHUB",
"id": "VHN-13963"
},
{
"db": "BID",
"id": "15308"
},
{
"db": "PACKETSTORM",
"id": "41277"
},
{
"db": "PACKETSTORM",
"id": "41264"
},
{
"db": "CNNVD",
"id": "CNNVD-200511-128"
},
{
"db": "NVD",
"id": "CVE-2005-2754"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2005-11-08T00:00:00",
"db": "CERT/CC",
"id": "VU#855118"
},
{
"date": "2005-11-05T00:00:00",
"db": "VULHUB",
"id": "VHN-13963"
},
{
"date": "2005-11-03T00:00:00",
"db": "BID",
"id": "15308"
},
{
"date": "2005-11-04T17:18:32",
"db": "PACKETSTORM",
"id": "41277"
},
{
"date": "2005-11-04T17:09:11",
"db": "PACKETSTORM",
"id": "41264"
},
{
"date": "2005-11-05T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200511-128"
},
{
"date": "2005-11-05T11:02:00",
"db": "NVD",
"id": "CVE-2005-2754"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2005-11-08T00:00:00",
"db": "CERT/CC",
"id": "VU#855118"
},
{
"date": "2018-10-19T00:00:00",
"db": "VULHUB",
"id": "VHN-13963"
},
{
"date": "2005-11-03T00:00:00",
"db": "BID",
"id": "15308"
},
{
"date": "2006-08-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200511-128"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2005-2754"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "41277"
},
{
"db": "CNNVD",
"id": "CNNVD-200511-128"
}
],
"trust": 0.7
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Apple QuickTime PictureViewer PICT data decompression buffer overflow",
"sources": [
{
"db": "CERT/CC",
"id": "VU#855118"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "digital error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200511-128"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…