CVE-2009-0956

Published Jun 2, 2009 CVSS 2.0 · 9.3 Critical EPSS 5.1% KEV · Not listed
Description
Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2009-0953 Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 4:57 AM
Reserved
Mar 18, 2009, 12:00 AM
Status
Modified
Published
Jun 2, 2009, 6:30 PM
Modified
Jun 16, 2026, 11:06 PM