CVE-2015-7086: Buffer Overflow

Q: What is the severity of CVE-2015-7086?

CVE-2015-7086 has a medium severity rating due to its potential for remote code execution and denial of service.

Q: How do I fix CVE-2015-7086?

The recommended fix for CVE-2015-7086 is to update Apple QuickTime to version 7.7.9 or later.

Q: What types of attacks can exploit CVE-2015-7086?

CVE-2015-7086 can be exploited through specially crafted movie files that lead to memory corruption.

Q: Is my system vulnerable to CVE-2015-7086?

If you are using Apple QuickTime versions prior to 7.7.9, your system is vulnerable to CVE-2015-7086.

Q: What are the consequences of exploiting CVE-2015-7086?

Exploitation of CVE-2015-7086 can result in arbitrary code execution or application crashes.

Published Jan 9, 2016

Updated

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091, CVE-2015-7092, and CVE-2015-7117.

Affected Software

1 affected component

QuickTime Player<=7.7.8

Event History

Jan 9, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-7086?

CVE-2015-7086 has a medium severity rating due to its potential for remote code execution and denial of service.

How do I fix CVE-2015-7086?

The recommended fix for CVE-2015-7086 is to update Apple QuickTime to version 7.7.9 or later.

What types of attacks can exploit CVE-2015-7086?

CVE-2015-7086 can be exploited through specially crafted movie files that lead to memory corruption.

Is my system vulnerable to CVE-2015-7086?

If you are using Apple QuickTime versions prior to 7.7.9, your system is vulnerable to CVE-2015-7086.

What are the consequences of exploiting CVE-2015-7086?