CVE-2016-4601
HighSummary
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the system or disrupt its operation, potentially leading to serious consequences for the organization.
Recommendation
It is recommended to update the operating system to version 10.11.6 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in QuickTime
See all- CVE-2017-2413High
An issue was discovered in certain Apple products, including macOS before 10.12.4, involving the 'QuickTime' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
- CVE-2016-4602High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-4600High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-4599High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document.
- CVE-2016-4597High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-1848High
QuickTime in Apple OS X before version 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
- CVE-2016-1769High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop file.
- CVE-2016-1768High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image.
- CVE-2016-1767High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image.
- CVE-2015-5779High
QuickTime 7 in Apple OS X before version 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file.
Original NVD description (English source)
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image.