CVE-2014-1243
Apple QuickTime nam Atom Parsing Remote Code Execution Vulnerability
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted track list in a movie file.
Apple QuickTime anterior a 7.7.5 no inicializa un puntero no especificado, lo que permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (caída de aplicación) a través de una lista de pistas manipulada en un archivo de vídeo.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the nam atom in an mp4 file. Manipulation of this atom can corrupt memory and a remote attacker can exploit this vulnerability to execute arbitrary code under the context of the process.
*Credits:
Tom Gallagher (Microsoft) & Paul Bates (Microsoft)
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-01-08 CVE Reserved
- 2014-02-26 CVE Published
- 2024-08-06 CVE Updated
- 2024-11-14 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (1)
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | <= 7.7.4 Search vendor "Apple" for product "Quicktime" and version " <= 7.7.4" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.0.0 Search vendor "Apple" for product "Quicktime" and version "7.0.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.0.1 Search vendor "Apple" for product "Quicktime" and version "7.0.1" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.0.2 Search vendor "Apple" for product "Quicktime" and version "7.0.2" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.0.3 Search vendor "Apple" for product "Quicktime" and version "7.0.3" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.0.4 Search vendor "Apple" for product "Quicktime" and version "7.0.4" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.1.0 Search vendor "Apple" for product "Quicktime" and version "7.1.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.1.1 Search vendor "Apple" for product "Quicktime" and version "7.1.1" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.1.2 Search vendor "Apple" for product "Quicktime" and version "7.1.2" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.1.3 Search vendor "Apple" for product "Quicktime" and version "7.1.3" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.1.4 Search vendor "Apple" for product "Quicktime" and version "7.1.4" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.1.5 Search vendor "Apple" for product "Quicktime" and version "7.1.5" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.1.6 Search vendor "Apple" for product "Quicktime" and version "7.1.6" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.2.0 Search vendor "Apple" for product "Quicktime" and version "7.2.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.2.1 Search vendor "Apple" for product "Quicktime" and version "7.2.1" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.3.0 Search vendor "Apple" for product "Quicktime" and version "7.3.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.3.1 Search vendor "Apple" for product "Quicktime" and version "7.3.1" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.3.1.70 Search vendor "Apple" for product "Quicktime" and version "7.3.1.70" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.4.0 Search vendor "Apple" for product "Quicktime" and version "7.4.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.4.1 Search vendor "Apple" for product "Quicktime" and version "7.4.1" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.4.5 Search vendor "Apple" for product "Quicktime" and version "7.4.5" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.5.0 Search vendor "Apple" for product "Quicktime" and version "7.5.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.5.5 Search vendor "Apple" for product "Quicktime" and version "7.5.5" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.6.0 Search vendor "Apple" for product "Quicktime" and version "7.6.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.6.1 Search vendor "Apple" for product "Quicktime" and version "7.6.1" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.6.2 Search vendor "Apple" for product "Quicktime" and version "7.6.2" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.6.5 Search vendor "Apple" for product "Quicktime" and version "7.6.5" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.6.6 Search vendor "Apple" for product "Quicktime" and version "7.6.6" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.6.7 Search vendor "Apple" for product "Quicktime" and version "7.6.7" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.6.8 Search vendor "Apple" for product "Quicktime" and version "7.6.8" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.6.9 Search vendor "Apple" for product "Quicktime" and version "7.6.9" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.7.0 Search vendor "Apple" for product "Quicktime" and version "7.7.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.7.1 Search vendor "Apple" for product "Quicktime" and version "7.7.1" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.7.2 Search vendor "Apple" for product "Quicktime" and version "7.7.2" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.7.3 Search vendor "Apple" for product "Quicktime" and version "7.7.3" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.60.92.0 Search vendor "Apple" for product "Quicktime" and version "7.60.92.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.62.14.0 Search vendor "Apple" for product "Quicktime" and version "7.62.14.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.64.17.73 Search vendor "Apple" for product "Quicktime" and version "7.64.17.73" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.65.17.80 Search vendor "Apple" for product "Quicktime" and version "7.65.17.80" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.66.71.0 Search vendor "Apple" for product "Quicktime" and version "7.66.71.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.67.75.0 Search vendor "Apple" for product "Quicktime" and version "7.67.75.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.68.75.0 Search vendor "Apple" for product "Quicktime" and version "7.68.75.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.69.80.9 Search vendor "Apple" for product "Quicktime" and version "7.69.80.9" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.70.80.34 Search vendor "Apple" for product "Quicktime" and version "7.70.80.34" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | 7.71.80.42 Search vendor "Apple" for product "Quicktime" and version "7.71.80.42" | - |
Affected
| ||||||