First published: Tue Jun 02 2009(Updated: )
Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie composed of a Sorenson 3 video file.
Credit: PSIRT-CNA@flexerasoftware.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple QuickTime | =7.1.5 | |
Apple QuickTime | =7.3.1 | |
Apple QuickTime | =7.5.5 | |
Apple QuickTime | =7.4.0 | |
Apple QuickTime | =6.5.1 | |
Apple QuickTime | =5.0.2 | |
Apple QuickTime | =6.1.0 | |
Apple QuickTime | =6.1.1 | |
Apple QuickTime | =6.5.2 | |
Apple QuickTime | =6.0.1 | |
Apple QuickTime | =7.0.3 | |
Apple QuickTime | =6.2.0 | |
Apple QuickTime | =5.0 | |
Apple QuickTime | =7.0.3 | |
Apple QuickTime | =6.1.1 | |
Apple QuickTime | =7.5.0 | |
Apple QuickTime | =7.1.5 | |
Apple QuickTime | =7.1.6 | |
Apple QuickTime | =7.5.0 | |
Apple QuickTime | =6.0.0 | |
Apple QuickTime | =7.2.1 | |
Apple QuickTime | =7.1.6 | |
Apple QuickTime | =6.4.0 | |
Apple QuickTime | =7.0.1 | |
Apple QuickTime | =7.1.4 | |
Apple QuickTime | =7.4.1 | |
Apple QuickTime | =7.0 | |
Apple QuickTime | =6.3.0 | |
Apple QuickTime | =7.0.2 | |
Apple QuickTime | =7.0 | |
Apple QuickTime | =6.2.0 | |
Apple QuickTime | =7.1.6 | |
Apple QuickTime | =7.1.5 | |
Apple QuickTime | =7.0.0 | |
Apple QuickTime | =7.4.1 | |
Apple QuickTime | =7.0.3 | |
Apple QuickTime | =7.4.5 | |
Apple QuickTime | =7.4.4 | |
Apple QuickTime | =4.1.2 | |
Apple QuickTime | =7.4.5 | |
Apple QuickTime | =7.1.4 | |
Apple QuickTime | =7.2.1 | |
Apple QuickTime | =7.3.1 | |
Apple QuickTime | =7.1.2 | |
Apple QuickTime | =5.0.2 | |
Apple QuickTime | =6.1.0 | |
Apple QuickTime | =7.1.3 | |
Apple QuickTime | =7.0.2 | |
Apple QuickTime | =7.2 | |
Apple QuickTime | =7.1.3 | |
Apple QuickTime | =5.0.2 | |
Apple QuickTime | =4.1.2 | |
Apple QuickTime | =6.1.0 | |
Apple QuickTime | =6.0.1 | |
Apple QuickTime | =7.2.0 | |
Apple QuickTime | =7.0.1 | |
Apple QuickTime | =5.0.1 | |
Apple QuickTime | =6.4.0 | |
Apple QuickTime | =6.2.0 | |
Apple QuickTime | =6.0.2 | |
Apple QuickTime | =6.5.1 | |
Apple QuickTime | =7.6.0 | |
Apple QuickTime | =7.5.0 | |
Apple QuickTime | =6.0.2 | |
Apple QuickTime | =7.0.2 | |
Apple QuickTime | =5.0.1 | |
Apple QuickTime | =7.3.0 | |
Apple QuickTime | =7.0.1 | |
Apple QuickTime | =7.4 | |
Apple QuickTime | =6.4.0 | |
Apple QuickTime | =7.0.4 | |
Apple QuickTime | =6.5.1 | |
Apple QuickTime | =3.0 | |
Apple QuickTime | =7.0.4 | |
Apple QuickTime | =7.2.0 | |
Apple QuickTime | =7.1.1 | |
Apple QuickTime | =4.1.2 | |
Apple QuickTime | =6.1 | |
Apple QuickTime | =7.1.1 | |
Apple QuickTime | =6.5 | |
Apple QuickTime | =7.4.0 | |
Apple QuickTime | =7.3.1.70 | |
Apple QuickTime | =7.1.2 | |
Apple QuickTime | =7.4.0 | |
Apple QuickTime | =7.1 | |
Apple QuickTime | =7.0.4 | |
Apple QuickTime | =6.0.1 | |
Apple QuickTime | =7.1.1 | |
Apple QuickTime | =7.1.0 | |
Apple QuickTime | =6.0.2 | |
Apple QuickTime | =6.3.0 | |
Apple QuickTime | =7.3.0 | |
Apple QuickTime | =7.0.2 | |
Apple QuickTime | =5.0.1 | |
Apple QuickTime | =6.0.0 | |
Apple QuickTime | =7.3.1 | |
Apple QuickTime | =7.3 | |
Apple QuickTime | =7.0.1 | |
Apple QuickTime | =7.4.1 | |
Apple QuickTime | =6.5.0 | |
Apple QuickTime | =6.3.0 | |
Apple QuickTime | =7.1.4 | |
Apple QuickTime | =7.3.0 | |
Apple QuickTime | =6.0 | |
Apple QuickTime | =6.5.2 | |
Apple QuickTime | =7.5 | |
Apple QuickTime | =6.0.0 | |
Apple QuickTime | =6.5.0 | |
Apple QuickTime | =7.5.5 | |
Apple QuickTime | =7.1.3 | |
Apple QuickTime | =6.5.0 | |
Apple QuickTime | =7.0 | |
Apple QuickTime | =7.1.0 | |
Apple QuickTime | =7.2.0 | |
Apple QuickTime | =7.1.2 | |
Apple QuickTime | =7.5.5 | |
Apple QuickTime | =6.1.1 | |
Apple QuickTime | =7.2 | |
Apple QuickTime | =6.5.2 | |
Apple QuickTime | =7.0.0 | |
Apple QuickTime | =7.2.1 | |
Apple QuickTime | =7.4.5 | |
Apple QuickTime | =7.1.0 | |
Apple QuickTime | =6.0 | |
Apple QuickTime | =7.0.0 | |
Apple QuickTime | <=7.6.1 | |
Apple QuickTime |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2009-0188 is considered high due to its ability to allow remote code execution.
To fix CVE-2009-0188, update your Apple QuickTime to version 7.6.2 or later.
CVE-2009-0188 affects multiple versions of Apple QuickTime on both Windows and Mac platforms.
CVE-2009-0188 can be exploited through crafted Sorenson 3 video files that lead to memory corruption.
CVE-2009-0188 poses a risk if users have not updated their Apple QuickTime software, making them vulnerable to attacks.