Total vulnerabilities in the database
The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.
| Software | From | Fixed in |
|---|---|---|
| apple / quicktime | 7.3.1 | 7.3.1.x |
| apple / quicktime | 6.5.1 | 6.5.1.x |
| apple / quicktime | 5.0 | 5.0.x |
| apple / quicktime | 7.0.3 | 7.0.3.x |
| apple / quicktime | 7.1.5 | 7.1.5.x |
| apple / quicktime | 7.0.1 | 7.0.1.x |
| apple / quicktime | 7.0 | 7.0.x |
| apple / quicktime | 7.1.6 | 7.1.6.x |
| apple / quicktime | 7.4.4 | 7.4.4.x |
| apple / quicktime | 4.1.2 | 4.1.2.x |
| apple / quicktime | 5.0.2 | 5.0.2.x |
| apple / quicktime | 7.0.2 | 7.0.2.x |
| apple / quicktime | - | 7.4.5.x |
| apple / quicktime | 5.0.1 | 5.0.1.x |
| apple / quicktime | 7.4 | 7.4.x |
| apple / quicktime | 3.0 | 3.0.x |
| apple / quicktime | 7.0.4 | 7.0.4.x |
| apple / quicktime | 6.5 | 6.5.x |
| apple / quicktime | 7.3.1.70 | 7.3.1.70.x |
| apple / quicktime | 7.1.2 | 7.1.2.x |
| apple / quicktime | 7.1 | 7.1.x |
| apple / quicktime | 7.1.1 | 7.1.1.x |
| apple / quicktime | 7.3 | 7.3.x |
| apple / quicktime | 7.1.4 | 7.1.4.x |
| apple / quicktime | 6.5.2 | 6.5.2.x |
| apple / quicktime | 7.1.3 | 7.1.3.x |
| apple / quicktime | 7.2 | 7.2.x |
| apple / quicktime | 6.0 | 6.0.x |