CVE-2005-3709: High severity QuickTime Player vulnerability
Published Dec 31, 2005
·Updated
Integer underflow in Apple Quicktime before 7.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Color Map Entry Size in a TGA image file.
Affected Software
4 affected components
QuickTime Player=7.0.1
QuickTime Player=7.0
QuickTime Player=7.0.2
QuickTime Player<=7.0.3
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2005
CVE Published
05:00 AM
Jan 11, 2006
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3709?
CVE-2005-3709 is considered a critical vulnerability due to its potential to cause denial of service and execute arbitrary code.
2
How do I fix CVE-2005-3709?
To fix CVE-2005-3709, users should update Apple QuickTime to version 7.0.4 or later.
3
What types of attacks can result from CVE-2005-3709?
CVE-2005-3709 can be exploited to crash the application or potentially execute arbitrary code on the affected system.
4
What software versions are affected by CVE-2005-3709?
CVE-2005-3709 affects QuickTime versions 7.0.1, 7.0, 7.0.2, and up to 7.0.3.
5
Is CVE-2005-3709 applicable to non-Apple devices?
CVE-2005-3709 specifically pertains to Apple QuickTime and does not apply to non-Apple devices.