CVE-2017-2413
HighSummary
An issue was discovered in certain Apple products, including macOS before 10.12.4, involving the 'QuickTime' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to unauthorized access to systems or application crashes.
Recommendation
It is recommended to update macOS to version 10.12.4 or later to mitigate this vulnerability.
Other vulnerabilities in QuickTime
See all- CVE-2016-4602High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-4601High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image.
- CVE-2016-4600High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-4599High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document.
- CVE-2016-4597High
QuickTime in Apple OS X before version 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image.
- CVE-2016-1848High
QuickTime in Apple OS X before version 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
- CVE-2016-1769High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop file.
- CVE-2016-1768High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image.
- CVE-2016-1767High
QuickTime in Apple OS X before version 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image.
- CVE-2015-5779High
QuickTime 7 in Apple OS X before version 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file.
Original NVD description (English source)
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "QuickTime" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted media file.