CVE-2015-3788: Buffer Overflow

Q: What is the severity of CVE-2015-3788?

CVE-2015-3788 has a high severity rating, allowing remote attackers to execute arbitrary code.

Q: How do I fix CVE-2015-3788?

To fix CVE-2015-3788, update QuickTime to the latest version available for your macOS.

Q: Which versions of QuickTime are affected by CVE-2015-3788?

CVE-2015-3788 affects QuickTime 7 prior to 7.0.0 on macOS versions up to 10.10.4.

Q: What types of attacks are possible with CVE-2015-3788?

CVE-2015-3788 can lead to remote code execution or a denial of service through crafted files.

Q: Is there a workaround for CVE-2015-3788?

There are no official workarounds for CVE-2015-3788; updating QuickTime is recommended.

Published Aug 16, 2015

Updated

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.

Affected Software

2 affected components

Apple QuickTime=7.0.0

Apple iOS and macOS<=10.10.4

Remediation

Patch Available

http://lists.apple.com/archives/security-announce/2015/Aug/msg00004.html

Event History

Aug 16, 2015

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-3788?

CVE-2015-3788 has a high severity rating, allowing remote attackers to execute arbitrary code.

How do I fix CVE-2015-3788?

To fix CVE-2015-3788, update QuickTime to the latest version available for your macOS.

Which versions of QuickTime are affected by CVE-2015-3788?