CVE-2011-0248

N/A

Published: August 4, 2011 at 01:00 AM UTC

Updated: June 16, 2026 at 11:27 PM UTC

1 product affected across 1 vendorQuicktime· also runs on 4 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTL file.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Quicktime · Applemaven

95%

v ≤ 7.6.93.0 4.1.2 5.0 5.0.1 5.0.2 6.0 6.0.0 6.0.1 6.0.2 6.1 6.1.0 6.1.1 6.2.0 6.3.0 6.4.0 6.5 6.5.0 6.5.1 6.5.2 7.0 7.0.0 7.0.1 7.0.2 7.0.3 7.0.4 7.1 7.1.0 7.1.1 7.1.2 7.1.3 7.1.4 7.1.5 7.1.6 7.2 7.2.0 7.2.1 7.3 7.3.0 7.3.1 7.3.1.70 7.4 7.4.0 7.4.1 7.4.5 7.5.0 7.5.5 7.6.0 7.6.1 7.6.2 7.6.5 7.6.6 7.6.7 7.6.8

microsoft-internet-explorer (environment) · microsoft-windows-7 (environment) · microsoft-windows-vista (environment) · microsoft-windows-xp (environment)