CVE-2011-3428
CriticalSummary
Buffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute arbitrary code.
Risk Assessment
Attackers may exploit this vulnerability to remotely execute malicious code, potentially leading to data loss or system compromise.
Recommendation
It is recommended to update QuickTime to version 7.7.1 or later to mitigate this vulnerability.
Other vulnerabilities in QuickTime
See all- CVE-2017-2413High
An issue was discovered in certain Apple products, including macOS before 10.12.4, involving the 'QuickTime' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
- CVE-2016-4602High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-4601High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image.
- CVE-2016-4600High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-4599High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document.
- CVE-2016-4597High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-1848High
QuickTime in Apple OS X before version 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
- CVE-2016-1769High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop file.
- CVE-2016-1768High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image.
- CVE-2016-1767High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image.
Original NVD description (English source)
Buffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute arbitrary code.