CVE-2004-0431

Published: Jul 7, 2004Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.

Affected (1)

Products: Apple: Quicktime

Apple

1 product

Quicktime

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Quicktime	Up to 6.5

References (10)

http://lists.apple.com/mhonarc/security-announce/msg00048.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=108360110618389&w=2

Source: cve@mitre.org

http://marc.info/?l=ntbugtraq&m=108356485013237&w=2

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/782958

Source: cve@mitre.org

US Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/16026

Source: cve@mitre.org

http://lists.apple.com/mhonarc/security-announce/msg00048.html