Published: 30/01/2017 Updated: 04/11/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and previous versions allows remote malicious users to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libquicktime libquicktime

Debian Bug report logs - #855099 libquicktime: CVE-2016-2399 Package: src:libquicktime; Maintainer for src:libquicktime is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 14 Feb 2017 04:57:02 UTC Severity: important Tags: security, u ...

Debian Bug report logs - #864664 CVE-2017-9122 CVE-2017-9123 CVE-2017-9124 CVE-2017-9125 CVE-2017-9126 CVE-2017-9127 CVE-2017-9128 Package: src:libquicktime; Maintainer for src:libquicktime is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Mon ...

#!/usr/bin/env python # ### # - 7 February 2016 - # My last bug hunting session (*for fun and no-profit*) # has been dedicated to libquicktime ### # # Author: Marco Romano - @nemux_ wwwnemuxorg # libquicktime 124 Integer Overflow # # Product Page: libquicktimesourceforgenet/ # Description: 'hdlr', 'stsd', 'ftab' MP4 Atoms Inte ...

libquicktime version 124 suffers from an integer overflow vulnerability ...

CWE-190 https://packetstormsecurity.com/files/135899/libquicktime-1.2.4-Integer-Overflow.html http://www.nemux.org/2016/02/23/libquicktime-1-2-4/http://www.securityfocus.com/bid/95880 https://www.exploit-db.com/exploits/39487/http://www.debian.org/security/2017/dsa-3800 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855099 https://www.exploit-db.com/exploits/39487/

CVE-2016-2399

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect