Published: 09/01/2016 Updated: 07/12/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.6 | Impact Score: 4.7 | Exploitability Score: 1.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Apple QuickTime prior to 7.7.9 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple quicktime

Your jingle to take into the weekend: QuickTime security fixes to apply

The Register • Shaun Nichols in San Francisco • 09 Jan 2016

Apple closes out week with patches for Windows

Apple has posted an update to its QuickTime media plugin, addressing multiple remote code execution flaws for Windows 7 and Windows Vista users, The Cupertino giant said that the QuickTime 7.7.9 patch will address a total of nine CVE-listed memory corruption vulnerabilities in QuickTime. Each could be targeted by loading a malformed movie file, leading to remote code execution or an application crash. Two of the vulnerabilities (CVE-2015-7086 and CVE-2015-7085) were credited to an anonymous secu...

CVE-2015-7087

Vulnerability Summary

Recent Articles

References

Vulmon Search

About

Products

Connect