CVE-2015-7086

6.6MEDIUM

Key Information:

Vendor
Apple
Status
Quicktime
Vendor
CVE Published:
9 January 2016

Summary

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

References

http://lists.apple.com/archives/security-announce/2016/Ja...
vendor-advisoryx_refsource_APPLE
http://www.securitytracker.com/id/1034610
vdb-entryx_refsource_SECTRACK
https://support.apple.com/HT205638
x_refsource_CONFIRM

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.