CVE-2015-3664 - QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3665 and CVE-2015-3669

Back Back to CVE browser

MEDIUM

QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3665 and CVE-2015-3669

Published Jul 3, 2015

6.8

MEDIUM

CVSS 2.0

EPSS 2.90%

Description

QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3665 and CVE-2015-3669.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (4)

http://lists.apple.com/archives/security-announce/2015/Jun/msg00005.html
vendor-advisoryx_refsource_APPLEPatchVendor Advisory
http://support.apple.com/kb/HT204947
x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/bid/75499
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032756
vdb-entryx_refsource_SECTRACK

Link	Providers	Tags
http://lists.apple.com/archives/security-announce/2015/Jun/msg00005.html		vendor-advisoryx_refsource_APPLEPatchVendor Advisory
http://support.apple.com/kb/HT204947		x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/bid/75499		vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032756		vdb-entryx_refsource_SECTRACK

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Jul 3, 2015

Updated Aug 6, 2024

Reserved May 7, 2015

Link CVE-2015-3664

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-3664

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-3664