CVE-2006-1454

Description

Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file with malformed image data.

Risk Information

Base Score
7.8
MODERATE
Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
24.607

Associated Vulnerability

VulnerabilityOS Platform
Update QuickTime 7.1 to latest versionWindows
Multiple Vulnerabilities are affected in QuickTime 7.0.3Windows
Multiple Vulnerabilities are affected in QuickTime 7.0.4Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234