Vulnerability Database

314,496

Total vulnerabilities in the database

CVE-2011-0257

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.

  • Published: Aug 15, 2011
  • Updated: Nov 9, 2025
  • CVE: CVE-2011-0257
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
apple / quicktime 7.6.8 7.6.8.x
apple / quicktime 7.3.1 7.3.1.x
apple / quicktime 7.6.7 7.6.7.x
apple / quicktime 7.0.3 7.0.3.x
apple / quicktime 7.5.0 7.5.0.x
apple / quicktime 7.1.5 7.1.5.x
apple / quicktime 7.6.1 7.6.1.x
apple / quicktime 7.0.1 7.0.1.x
apple / quicktime 7.1.6 7.1.6.x
apple / quicktime 7.4.1 7.4.1.x
apple / quicktime 7.4.5 7.4.5.x
apple / quicktime 7.2.1 7.2.1.x
apple / quicktime 7.0.2 7.0.2.x
apple / quicktime 7.67.75.0 7.67.75.0.x
apple / quicktime 7.2.0 7.2.0.x
apple / quicktime 7.6.0 7.6.0.x
apple / quicktime 7.3.0 7.3.0.x
apple / quicktime 7.0.4 7.0.4.x
apple / quicktime 7.3.1.70 7.3.1.70.x
apple / quicktime 7.1.2 7.1.2.x
apple / quicktime 7.4.0 7.4.0.x
apple / quicktime 7.1.1 7.1.1.x
apple / quicktime 7.6.6 7.6.6.x
apple / quicktime - 7.6.9.x
apple / quicktime 7.66.71.0 7.66.71.0.x
apple / quicktime 7.1.4 7.1.4.x
apple / quicktime 7.1.3 7.1.3.x
apple / quicktime 7.5.5 7.5.5.x
apple / quicktime 7.6.2 7.6.2.x
apple / quicktime 7.6.5 7.6.5.x
apple / quicktime 7.1.0 7.1.0.x
apple / quicktime 7.0.0 7.0.0.x