CVE-2004-0926
HighSummary
A heap-based buffer overflow vulnerability in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 allows remote attackers to execute arbitrary code via a specially crafted BMP image.
Risk Assessment
The risk involves potential remote code execution without authentication, which could lead to data theft, malware installation, or further network compromise.
Recommendation
It is recommended to immediately update Apple QuickTime to the latest version that addresses this vulnerability. If updating is not possible, restrict opening BMP files from untrusted sources.
Related vulnerabilities
- CVE-2026-79876Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
- CVE-2026-79875Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
- CVE-2026-79874Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
- CVE-2026-79873Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
- CVE-2026-79872Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
- CVE-2026-79871Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
- CVE-2026-79870Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
- CVE-2026-79869Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
- CVE-2026-79868Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
- CVE-2026-79867Critical
No vulnerability description is available in the NVD. The nature and scope of the issue cannot be determined from the provided data.
Original NVD description (English source)
Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS