CVE-2010-0536: Buffer Overflow
Published Mar 31, 2010
·Updated
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted BMP image.
Affected Software
50 affected components
Apple Quicktime<=7.6.0
Apple Quicktime=7.0.0
Apple Quicktime=7.0.1
Apple Quicktime=7.0.2
Apple Quicktime=7.0.3
Apple Quicktime=7.0.4
Apple Quicktime=7.1.0
Apple Quicktime=7.1.1
Apple Quicktime=7.1.2
Apple Quicktime=7.1.3
Apple Quicktime=7.1.4
Apple Quicktime=7.1.5
Apple Quicktime=7.1.6
Apple Quicktime=7.2.0
Apple Quicktime=7.2.1
Apple Quicktime=7.3.0
Apple Quicktime=7.3.1
Apple Quicktime=7.4.0
Apple Quicktime=7.4.1
Apple Quicktime=7.4.5
Apple Quicktime=7.5.0
Apple Quicktime=7.5.5
Microsoft Windows 7
Microsoft Windows Vista
Microsoft Windows XP=sp2
All of the following
Any of the following
Apple Quicktime<=7.6.0
Apple Quicktime=7.0.0
Apple Quicktime=7.0.1
Apple Quicktime=7.0.2
Apple Quicktime=7.0.3
Apple Quicktime=7.0.4
Apple Quicktime=7.1.0
Apple Quicktime=7.1.1
Apple Quicktime=7.1.2
Apple Quicktime=7.1.3
Apple Quicktime=7.1.4
Apple Quicktime=7.1.5
Apple Quicktime=7.1.6
Apple Quicktime=7.2.0
Apple Quicktime=7.2.1
Apple Quicktime=7.3.0
Apple Quicktime=7.3.1
Apple Quicktime=7.4.0
Apple Quicktime=7.4.1
Apple Quicktime=7.4.5
Apple Quicktime=7.5.0
Apple Quicktime=7.5.5
Any of the following
Microsoft Windows 7
Microsoft Windows Vista
Microsoft Windows XP=sp2
Remediation
Event History
Mar 31, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0536?
CVE-2010-0536 is considered a high severity vulnerability due to potential remote code execution and application crashes.
2
How do I fix CVE-2010-0536?
To fix CVE-2010-0536, upgrade Apple QuickTime to version 7.6.6 or later on Windows systems.
3
Which versions of Apple QuickTime are affected by CVE-2010-0536?
CVE-2010-0536 affects Apple QuickTime versions prior to 7.6.6 on Windows.
4
What type of attack does CVE-2010-0536 allow?
CVE-2010-0536 allows remote attackers to execute arbitrary code or cause a denial of service.
5
Can CVE-2010-0536 impact Windows Vista or 7 users?
No, CVE-2010-0536 does not impact users on Windows Vista or Windows 7 as they are not vulnerable.