CVE-2015-7085: Buffer Overflow

Q: What is the severity of CVE-2015-7085?

CVE-2015-7085 is considered a critical vulnerability due to its potential to allow remote code execution.

Q: How do I fix CVE-2015-7085?

To fix CVE-2015-7085, you need to update Apple QuickTime to version 7.7.9 or later.

Q: Which versions of QuickTime are affected by CVE-2015-7085?

CVE-2015-7085 affects all versions of Apple QuickTime prior to 7.7.9.

Q: What type of attack can exploit CVE-2015-7085?

CVE-2015-7085 can be exploited through a crafted movie file which leads to memory corruption.

Q: Can CVE-2015-7085 cause a denial of service?

Yes, CVE-2015-7085 can cause a denial of service by crashing the application due to memory corruption.

Published Jan 9, 2016

Updated

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7086, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

Affected Software

1 affected component

QuickTime Player<=7.7.8

Event History

Jan 9, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-7085?

CVE-2015-7085 is considered a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2015-7085?

To fix CVE-2015-7085, you need to update Apple QuickTime to version 7.7.9 or later.

Which versions of QuickTime are affected by CVE-2015-7085?

CVE-2015-7085 affects all versions of Apple QuickTime prior to 7.7.9.

What type of attack can exploit CVE-2015-7085?

CVE-2015-7085 can be exploited through a crafted movie file which leads to memory corruption.

Can CVE-2015-7085 cause a denial of service?