CVE-2005-2754: Integer Overflow
Published Nov 5, 2005
·Updated
Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with "Improper movie attributes."
Affected Software
7 affected components
QuickTime Player=7.0.1
QuickTime Player=7.0
QuickTime Player=6.5.2
QuickTime Player=7.0.1
QuickTime Player<=7.0.2
QuickTime Player=7.0.1
QuickTime Player=6.5.2
Remediation
Patch Available
Event History
Nov 5, 2005
CVE Published
11:02 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2754?
CVE-2005-2754 is rated as a critical vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2005-2754?
To fix CVE-2005-2754, update Apple QuickTime to version 7.0.3 or later.
3
What systems are affected by CVE-2005-2754?
CVE-2005-2754 affects QuickTime versions prior to 7.0.3 on both Windows and Mac OS X.
4
What type of attack can be executed using CVE-2005-2754?
CVE-2005-2754 can be exploited by attackers to execute arbitrary code via a crafted MOV file.
5
Is user assistance required to exploit CVE-2005-2754?
Yes, exploitation of CVE-2005-2754 requires user assistance to open the malicious MOV file.