CVE-2016-1767
HighSummary
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image.
Risk Assessment
This vulnerability could lead to serious consequences, including system takeover or disruption of service.
Recommendation
It is recommended to update the system to version 10.11.4 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in QuickTime
See all- CVE-2017-2413High
An issue was discovered in certain Apple products, including macOS before 10.12.4, involving the 'QuickTime' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
- CVE-2016-4602High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-4601High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image.
- CVE-2016-4600High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-4599High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document.
- CVE-2016-4597High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-1848High
QuickTime in Apple OS X before version 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
- CVE-2016-1769High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop file.
- CVE-2016-1768High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image.
- CVE-2015-5779High
QuickTime 7 in Apple OS X before version 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file.
Original NVD description (English source)
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1768.