CVE-2015-3668: Buffer Overflow
QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3667.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3668?
CVE-2015-3668 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2015-3668?
To fix CVE-2015-3668, users should update Apple QuickTime to version 7.7.7 or later and upgrade macOS to at least version 10.10.4.
What products are affected by CVE-2015-3668?
CVE-2015-3668 affects Apple QuickTime versions prior to 7.7.7 and macOS versions prior to 10.10.4.
What type of attack does CVE-2015-3668 enable?
CVE-2015-3668 enables remote attackers to execute arbitrary code or cause a denial of service through crafted media files.
Is there a workaround for CVE-2015-3668?
While the best mitigation for CVE-2015-3668 is to apply the relevant updates, avoiding the use of QuickTime on vulnerable systems can serve as a temporary workaround.