VAR-200511-0174

Vulnerability from variot - Updated: 2025-04-03 22:23

Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service (crash) via a crafted file with a missing movie attribute, which leads to a null dereference. Apple QuickTime PictureViewer contains a buffer overflow that may allow a remote attacker to execute arbitrary code on a vulnerable system. QuickTime is prone to a denial of service vulnerability. This issue is due to a failure in the application to handle exceptional conditions. Successful exploitation of this vulnerability will cause the application to crash, effectively denying service to legitimate users. This issue affects both Microsoft Windows, and Apple versions of QuickTime.

CVE-ID: CVE-2005-2755

Original location: http://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt

Severity: Critical - attack against any application loading remotely-originated content.

Software affected: QuickTime package 7.0.1 for Mac OS X 10.3 QuickTime package 7.0.1 for Mac OS X 10.4 QuickTime package 6.5.2 for Mac OS X 10.3 QuickTime package 6.5.2 for Mac OS X 10.2 QuickTime package 7* for Windows

        Older versions may be also vulnerable.

Note: Following versions are not vulnerable, due to the fact I have reported the vulnerabilities before their releases:

        QuickTime package 7.0.2 for Mac OS X 10.3
        QuickTime package 7.0.2 for Mac OS X 10.4
  1. DISCLAIMER

Author takes no responsibility for any actions with provided informations or codes. The copyright for any material created by the author is reserved. Any duplication of codes or texts provided here in electronic or printed publications is not permitted without the author's agreement.

I. BACKGROUND

Apple QuickTime Player is one of the Apple QuickTime components used by hundreds of millions of users.

II.

A missing movie attribute is interpreted as an extension, but the absence of the extension is not flagged as an error, resulting in a de-reference of a NULL pointer.

III. POC CODE

Due to severity of this bug i will not release any proof of concept codes for this issue.

IV. VENDOR RESPONSE

Vendor (Apple) has been noticed and released all necessary patches.

best regards, Piotr Bania

--

Piotr Bania - bania.piotr@gmail.com - 0xCD, 0x19 Fingerprint: 413E 51C7 912E 3D4E A62A BFA4 1FF6 689F BE43 AC33 http://pb.specialised.info - Key ID: 0xBE43AC33

                       " Dinanzi a me non fuor cose create
                         se non etterne, e io etterno duro. 
                         Lasciate ogne speranza, voi ch'intrate "
                                       - Dante, Inferno Canto III

Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ .

TITLE: Apple QuickTime Multiple Vulnerabilities

SECUNIA ADVISORY ID: SA17428

VERIFY ADVISORY: http://secunia.com/advisories/17428/

CRITICAL: Highly critical

IMPACT: DoS, System access

WHERE:

From remote

SOFTWARE: Apple QuickTime 7.x http://secunia.com/product/5090/ Apple Quicktime 6.x http://secunia.com/product/810/

DESCRIPTION: Piotr Bania has reported some vulnerabilities in Apple QuickTime, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a user's system.

1) An integer overflow error exists in the handling of a "Pascal" style string when loading a ".mov" video file. This can result in memory overwrite due to a large memory copy, potentially allowing arbitrary code execution via a specially crafted video file.

2) An integer overflow error exists in the handling of certain movie attributes when loading a ".mov" video file. This can result in memory overwrite due to a large memory copy, potentially allowing arbitrary code execution via a specially crafted video file. This may be exploited to crash an application that uses QuickTime when a specially crafted video file is loaded.

4) A boundary error exists in the QuickTime PictureViewer when decompressing PICT data. This may be exploited to cause a memory overwrite, potentially allowing arbitrary code execution via a specially crafted PICT picture file.

Prior versions may also be affected.

SOLUTION: Update to version 7.0.3. http://www.apple.com/support/downloads/quicktime703.html

PROVIDED AND/OR DISCOVERED BY: Piotr Bania

ORIGINAL ADVISORY: Apple: http://docs.info.apple.com/article.html?artnum=302772

Piotr Bania: http://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt http://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt http://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt http://pb.specialised.info/all/adv/quicktime-pict-adv.txt

About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.

Subscribe: http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

Show details on source website
To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-200511-0174",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "quicktime",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "apple",
        "version": "6.5.2"
      },
      {
        "model": "quicktime",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "apple",
        "version": "7.0"
      },
      {
        "model": "quicktime",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "apple",
        "version": "7.0.1"
      },
      {
        "model": "quicktime",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "apple",
        "version": "7.0.2"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "apple computer",
        "version": null
      },
      {
        "model": "quicktime",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "apple",
        "version": "7.0.2"
      },
      {
        "model": "quicktime player",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.0.2"
      },
      {
        "model": "quicktime player",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.0.1"
      },
      {
        "model": "quicktime player",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.0"
      },
      {
        "model": "quicktime player",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "6.5.2"
      },
      {
        "model": "quicktime player",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "6.5.1"
      },
      {
        "model": "quicktime player",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "6.5"
      },
      {
        "model": "quicktime player",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "6.1"
      },
      {
        "model": "quicktime player",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.2"
      },
      {
        "model": "quicktime player",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "6"
      },
      {
        "model": "quicktime player",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "apple",
        "version": "7.0.3"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#855118"
      },
      {
        "db": "BID",
        "id": "15307"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-123"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2755"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Piotr Bania  bania.piotr@gmail.com",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-123"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2005-2755",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.6,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 4.9,
            "id": "CVE-2005-2755",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "LOW",
            "trust": 1.1,
            "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.6,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 4.9,
            "id": "VHN-13964",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "LOW",
            "trust": 0.1,
            "vectorString": "AV:N/AC:H/AU:N/C:N/I:N/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2005-2755",
            "trust": 1.0,
            "value": "LOW"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#855118",
            "trust": 0.8,
            "value": "8.61"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200511-123",
            "trust": 0.6,
            "value": "LOW"
          },
          {
            "author": "VULHUB",
            "id": "VHN-13964",
            "trust": 0.1,
            "value": "LOW"
          },
          {
            "author": "VULMON",
            "id": "CVE-2005-2755",
            "trust": 0.1,
            "value": "LOW"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#855118"
      },
      {
        "db": "VULHUB",
        "id": "VHN-13964"
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2755"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-123"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2755"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service (crash) via a crafted file with a missing movie attribute, which leads to a null dereference. Apple QuickTime PictureViewer contains a buffer overflow that may allow a remote attacker to execute arbitrary code on a vulnerable system. QuickTime is prone to a denial of service vulnerability.  This issue is due to a failure in the application to handle exceptional conditions. \nSuccessful exploitation of this vulnerability will cause the application to crash, effectively denying service to legitimate users. \nThis issue affects both Microsoft Windows, and Apple versions of QuickTime. \n\n\nCVE-ID: \t\tCVE-2005-2755\n\nOriginal location:\nhttp://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt\n\nSeverity: \t\tCritical - attack against any application\n                         loading remotely-originated content. \n\nSoftware affected:\tQuickTime package 7.0.1 for Mac OS X 10.3\n\t\t\tQuickTime package 7.0.1 for Mac OS X 10.4\n\t\t\tQuickTime package 6.5.2 for Mac OS X 10.3\n\t\t\tQuickTime package 6.5.2 for Mac OS X 10.2\n\t\t\tQuickTime package 7* for Windows\n\n\t\t\tOlder versions may be also vulnerable. \nNote:\t\t\tFollowing versions are not vulnerable, due to\n\t\t\tthe fact I have reported the vulnerabilities\n\t\t\tbefore their releases:\n\t\n\t\t\tQuickTime package 7.0.2 for Mac OS X 10.3\n\t\t\tQuickTime package 7.0.2 for Mac OS X 10.4\n\n\n\n0.   DISCLAIMER\n\nAuthor takes no responsibility for any actions with provided\ninformations or codes. The copyright for any material created by the\nauthor is reserved. Any duplication of codes or texts provided here in\nelectronic or printed publications is not permitted without the author\u0027s\nagreement. \n\nI.   BACKGROUND\n\nApple QuickTime Player is one of the Apple QuickTime components\nused by hundreds of millions of users. \n\nII. \n\nA missing movie attribute is interpreted as an extension, but the\nabsence of the extension is not flagged as an error, resulting in\na de-reference of a NULL pointer. \n\n\nIII. POC CODE\n\nDue to severity of this bug i will not release any proof of concept\ncodes for this issue. \n\nIV.  VENDOR RESPONSE\n\nVendor (Apple) has been noticed and released all necessary patches. \n\t\n\nbest regards,\nPiotr Bania\n\n-- \n--------------------------------------------------------------------\nPiotr Bania - \u003cbania.piotr@gmail.com\u003e - 0xCD, 0x19\nFingerprint: 413E 51C7 912E 3D4E A62A  BFA4 1FF6 689F BE43 AC33\nhttp://pb.specialised.info  - Key ID: 0xBE43AC33\n--------------------------------------------------------------------\n\n                           \" Dinanzi a me non fuor cose create\n                             se non etterne, e io etterno duro. \n                             Lasciate ogne speranza, voi ch\u0027intrate \"\n                                           - Dante, Inferno Canto III\n\n_______________________________________________\nFull-Disclosure - We believe in it. \nCharter: http://lists.grok.org.uk/full-disclosure-charter.html\nHosted and sponsored by Secunia - http://secunia.com/\n. \n\nTITLE:\nApple QuickTime Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA17428\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/17428/\n\nCRITICAL:\nHighly critical\n\nIMPACT:\nDoS, System access\n\nWHERE:\n\u003eFrom remote\n\nSOFTWARE:\nApple QuickTime 7.x\nhttp://secunia.com/product/5090/\nApple Quicktime 6.x\nhttp://secunia.com/product/810/\n\nDESCRIPTION:\nPiotr Bania has reported some vulnerabilities in Apple QuickTime,\nwhich can be exploited by malicious people to cause a DoS (Denial of\nService) and potentially to compromise a user\u0027s system. \n\n1) An integer overflow error exists in the handling of a \"Pascal\"\nstyle string when loading a \".mov\" video file. This can result in\nmemory overwrite due to a large memory copy, potentially allowing\narbitrary code execution via a specially crafted video file. \n\n2) An integer overflow error exists in the handling of certain movie\nattributes when loading a \".mov\" video file. This can result in\nmemory overwrite due to a large memory copy, potentially allowing\narbitrary code execution via a specially crafted video file. This may be exploited to\ncrash an application that uses QuickTime when a specially crafted\nvideo file is loaded. \n\n4) A boundary error exists in the QuickTime PictureViewer when\ndecompressing PICT data. This may be exploited to cause a memory\noverwrite, potentially allowing arbitrary code execution via a\nspecially crafted PICT picture file. \n\nPrior versions may also be affected. \n\nSOLUTION:\nUpdate to version 7.0.3. \nhttp://www.apple.com/support/downloads/quicktime703.html\n\nPROVIDED AND/OR DISCOVERED BY:\nPiotr Bania\n\nORIGINAL ADVISORY:\nApple:\nhttp://docs.info.apple.com/article.html?artnum=302772\n\nPiotr Bania:\nhttp://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt\nhttp://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt\nhttp://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt\nhttp://pb.specialised.info/all/adv/quicktime-pict-adv.txt\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-2755"
      },
      {
        "db": "CERT/CC",
        "id": "VU#855118"
      },
      {
        "db": "BID",
        "id": "15307"
      },
      {
        "db": "VULHUB",
        "id": "VHN-13964"
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2755"
      },
      {
        "db": "PACKETSTORM",
        "id": "41278"
      },
      {
        "db": "PACKETSTORM",
        "id": "41264"
      }
    ],
    "trust": 2.25
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-13964",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-13964"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "SECUNIA",
        "id": "17428",
        "trust": 2.7
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2755",
        "trust": 2.2
      },
      {
        "db": "BID",
        "id": "15307",
        "trust": 2.1
      },
      {
        "db": "VUPEN",
        "id": "ADV-2005-2293",
        "trust": 1.8
      },
      {
        "db": "SREASON",
        "id": "145",
        "trust": 1.8
      },
      {
        "db": "SECTRACK",
        "id": "1015152",
        "trust": 1.8
      },
      {
        "db": "OSVDB",
        "id": "20477",
        "trust": 1.8
      },
      {
        "db": "OSVDB",
        "id": "20478",
        "trust": 0.8
      },
      {
        "db": "CERT/CC",
        "id": "VU#855118",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-123",
        "trust": 0.7
      },
      {
        "db": "BUGTRAQ",
        "id": "20051104 ADVISORY: APPLE QUICKTIME PLAYER REMOTE DENIAL OF SERVICE",
        "trust": 0.6
      },
      {
        "db": "FULLDISC",
        "id": "20051103 ADVISORY: APPLE QUICKTIME PLAYER REMOTE DENIAL OF SERVICE",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "41278",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-13964",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2755",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "41264",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#855118"
      },
      {
        "db": "VULHUB",
        "id": "VHN-13964"
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2755"
      },
      {
        "db": "BID",
        "id": "15307"
      },
      {
        "db": "PACKETSTORM",
        "id": "41278"
      },
      {
        "db": "PACKETSTORM",
        "id": "41264"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-123"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2755"
      }
    ]
  },
  "id": "VAR-200511-0174",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-13964"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2025-04-03T22:23:57.114000Z",
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-2755"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.0,
        "url": "http://docs.info.apple.com/article.html?artnum=302772"
      },
      {
        "trust": 2.0,
        "url": "http://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt"
      },
      {
        "trust": 1.9,
        "url": "http://www.securityfocus.com/bid/15307"
      },
      {
        "trust": 1.8,
        "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0102.html"
      },
      {
        "trust": 1.8,
        "url": "http://www.osvdb.org/20477"
      },
      {
        "trust": 1.8,
        "url": "http://securitytracker.com/id?1015152"
      },
      {
        "trust": 1.8,
        "url": "http://secunia.com/advisories/17428"
      },
      {
        "trust": 1.8,
        "url": "http://securityreason.com/securityalert/145"
      },
      {
        "trust": 1.2,
        "url": "http://www.securityfocus.com/archive/1/415717/30/0/threaded"
      },
      {
        "trust": 1.2,
        "url": "http://www.vupen.com/english/advisories/2005/2293"
      },
      {
        "trust": 0.9,
        "url": "http://secunia.com/advisories/17428/"
      },
      {
        "trust": 0.9,
        "url": "http://pb.specialised.info/all/adv/quicktime-pict-adv.txt"
      },
      {
        "trust": 0.8,
        "url": "http://www.osvdb.org/displayvuln.php?osvdb_id=20478"
      },
      {
        "trust": 0.6,
        "url": "http://www.securityfocus.com/archive/1/archive/1/415717/30/0/threaded"
      },
      {
        "trust": 0.6,
        "url": "http://www.frsirt.com/english/advisories/2005/2293"
      },
      {
        "trust": 0.3,
        "url": "http://www.apple.com/quicktime/"
      },
      {
        "trust": 0.3,
        "url": "http://www.info.apple.com/usen/security/security_updates.html"
      },
      {
        "trust": 0.3,
        "url": "/archive/1/415717"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2005-2755"
      },
      {
        "trust": 0.1,
        "url": "http://pb.specialised.info"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/"
      },
      {
        "trust": 0.1,
        "url": "http://lists.grok.org.uk/full-disclosure-charter.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/downloads/quicktime703.html"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/5090/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/810/"
      },
      {
        "trust": 0.1,
        "url": "http://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/about_secunia_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#855118"
      },
      {
        "db": "VULHUB",
        "id": "VHN-13964"
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2755"
      },
      {
        "db": "BID",
        "id": "15307"
      },
      {
        "db": "PACKETSTORM",
        "id": "41278"
      },
      {
        "db": "PACKETSTORM",
        "id": "41264"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-123"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2755"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#855118"
      },
      {
        "db": "VULHUB",
        "id": "VHN-13964"
      },
      {
        "db": "VULMON",
        "id": "CVE-2005-2755"
      },
      {
        "db": "BID",
        "id": "15307"
      },
      {
        "db": "PACKETSTORM",
        "id": "41278"
      },
      {
        "db": "PACKETSTORM",
        "id": "41264"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-123"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-2755"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2005-11-08T00:00:00",
        "db": "CERT/CC",
        "id": "VU#855118"
      },
      {
        "date": "2005-11-05T00:00:00",
        "db": "VULHUB",
        "id": "VHN-13964"
      },
      {
        "date": "2005-11-05T00:00:00",
        "db": "VULMON",
        "id": "CVE-2005-2755"
      },
      {
        "date": "2005-11-03T00:00:00",
        "db": "BID",
        "id": "15307"
      },
      {
        "date": "2005-11-04T17:20:19",
        "db": "PACKETSTORM",
        "id": "41278"
      },
      {
        "date": "2005-11-04T17:09:11",
        "db": "PACKETSTORM",
        "id": "41264"
      },
      {
        "date": "2005-11-05T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200511-123"
      },
      {
        "date": "2005-11-05T11:02:00",
        "db": "NVD",
        "id": "CVE-2005-2755"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2005-11-08T00:00:00",
        "db": "CERT/CC",
        "id": "VU#855118"
      },
      {
        "date": "2018-10-19T00:00:00",
        "db": "VULHUB",
        "id": "VHN-13964"
      },
      {
        "date": "2018-10-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2005-2755"
      },
      {
        "date": "2005-11-03T00:00:00",
        "db": "BID",
        "id": "15307"
      },
      {
        "date": "2006-08-28T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200511-123"
      },
      {
        "date": "2025-04-03T01:03:51.193000",
        "db": "NVD",
        "id": "CVE-2005-2755"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "41278"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-123"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Apple QuickTime PictureViewer PICT data decompression buffer overflow",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#855118"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200511-123"
      }
    ],
    "trust": 0.6
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.