CVE-2015-3669: Buffer Overflow
Published Jul 3, 2015
·Updated
QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3664 and CVE-2015-3665.
Affected Software
2 affected components
Apple QuickTime<=7.7.6
Apple iOS and macOS<=10.10.3
Remediation
Event History
Jul 3, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3669?
CVE-2015-3669 is classified as a critical vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption.
2
How do I fix CVE-2015-3669?
To fix CVE-2015-3669, users should update Apple QuickTime to version 7.7.7 or later.
3
What software is affected by CVE-2015-3669?
CVE-2015-3669 affects Apple QuickTime versions prior to 7.7.7 and macOS versions before 10.10.4.
4
Can CVE-2015-3669 be exploited remotely?
Yes, CVE-2015-3669 can be exploited remotely if a user opens a crafted file.
5
What type of attack can CVE-2015-3669 facilitate?
CVE-2015-3669 can facilitate remote code execution or denial of service attacks.