CVE-2010-0527: Integer Overflow
Published Mar 31, 2010
·Updated
Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
Affected Software
50 affected components
Apple Quicktime<=7.6.0
Apple Quicktime=7.0.0
Apple Quicktime=7.0.1
Apple Quicktime=7.0.2
Apple Quicktime=7.0.3
Apple Quicktime=7.0.4
Apple Quicktime=7.1.0
Apple Quicktime=7.1.1
Apple Quicktime=7.1.2
Apple Quicktime=7.1.3
Apple Quicktime=7.1.4
Apple Quicktime=7.1.5
Apple Quicktime=7.1.6
Apple Quicktime=7.2.0
Apple Quicktime=7.2.1
Apple Quicktime=7.3.0
Apple Quicktime=7.3.1
Apple Quicktime=7.4.0
Apple Quicktime=7.4.1
Apple Quicktime=7.4.5
Apple Quicktime=7.5.0
Apple Quicktime=7.5.5
Microsoft Windows 7
Microsoft Windows Vista
Microsoft Windows XP=sp2
All of the following
Any of the following
Apple Quicktime<=7.6.0
Apple Quicktime=7.0.0
Apple Quicktime=7.0.1
Apple Quicktime=7.0.2
Apple Quicktime=7.0.3
Apple Quicktime=7.0.4
Apple Quicktime=7.1.0
Apple Quicktime=7.1.1
Apple Quicktime=7.1.2
Apple Quicktime=7.1.3
Apple Quicktime=7.1.4
Apple Quicktime=7.1.5
Apple Quicktime=7.1.6
Apple Quicktime=7.2.0
Apple Quicktime=7.2.1
Apple Quicktime=7.3.0
Apple Quicktime=7.3.1
Apple Quicktime=7.4.0
Apple Quicktime=7.4.1
Apple Quicktime=7.4.5
Apple Quicktime=7.5.0
Apple Quicktime=7.5.5
Any of the following
Microsoft Windows 7
Microsoft Windows Vista
Microsoft Windows XP=sp2
Remediation
Event History
Mar 31, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0527?
CVE-2010-0527 has been classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2010-0527?
To resolve CVE-2010-0527, upgrade Apple QuickTime to version 7.6.6 or later.
3
What versions of QuickTime are affected by CVE-2010-0527?
CVE-2010-0527 affects Apple QuickTime versions prior to 7.6.6 on Windows.
4
Can CVE-2010-0527 cause denial of service?
Yes, CVE-2010-0527 can cause denial of service by crashing the application when processing a specially crafted PICT image.
5
What type of attack does CVE-2010-0527 facilitate?
CVE-2010-0527 facilitates remote code execution attacks, allowing attackers to run arbitrary code on the user's system.