| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-9127 | 4.3 |
The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9124 | 4.3 |
The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9122 | 7.1 |
The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9125 | 4.3 |
The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9128 | 4.3 |
The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9126 | 4.3 |
The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9123 | 4.3 |
The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9125 | 4.3 |
The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9126 | 4.3 |
The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9127 | 4.3 |
The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9124 | 4.3 |
The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9128 | 4.3 |
The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9122 | 7.1 |
The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2017-9123 | 4.3 |
The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.
|
28-09-2020 - 21:15 | 12-06-2017 - 06:29 | |
| CVE-2006-4103 | 7.5 |
PHP remote file inclusion vulnerability in article-raw.php in Jason Alexander phNNTP 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_newsportal parameter.
|
17-10-2018 - 21:33 | 14-08-2006 - 20:04 | |
| CVE-2010-1479 | 7.5 |
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter in a raw action to index.php.
|
11-06-2010 - 04:00 | 19-04-2010 - 19:30 |