CVE-2010-0520

Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC file, related to crafted DELTA_FLI chunks and untrusted length values in a .fli file, which are not properly handled during decompression.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

18.57% chance of exploitation in the next 30 days, 97th percentile

Published

2010-03-30

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15035

References

• CVE Record
• NVD entry

Related

• CVE-2010-0519
• CVE-2010-0552
• CVE-2010-0496
• CVE-2010-0553
• CVE-2010-0483
• CVE-2010-0557