CVE-2016-4602
HighSummary
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
Risk Assessment
This vulnerability may lead to serious security incidents, including unauthorized access to the system and data loss.
Recommendation
It is recommended to update the system to version 10.11.6 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in QuickTime
See all- CVE-2017-2413High
An issue was discovered in certain Apple products, including macOS before 10.12.4, involving the 'QuickTime' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
- CVE-2016-4601High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image.
- CVE-2016-4600High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-4599High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document.
- CVE-2016-4597High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-1848High
QuickTime in Apple OS X before version 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
- CVE-2016-1769High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop file.
- CVE-2016-1768High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image.
- CVE-2016-1767High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image.
- CVE-2015-5779High
QuickTime 7 in Apple OS X before version 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file.
Original NVD description (English source)
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4600.