VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 31, 2010· Updated Apr 29, 2026

CVE-2010-0528

CVE-2010-0528

Description

Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value.

Affected products

24
  • Apple Inc./Quicktime24 versions
    cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*+ 23 more
    • cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.6.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.6.6:-:windows:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:*range: <=7.6.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.