Vulnerability Details CVE-2017-12145
In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_ftyp in ftyp.c, which allows attackers to cause a denial of service via a crafted file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.3
References
- https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in_30.html
- https://sourceforge.net/p/libquicktime/mailman/message/35888849/
- https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in_30.html
- https://sourceforge.net/p/libquicktime/mailman/message/35888849/
Products affected by CVE-2017-12145
-
cpe:2.3:a:libquicktime:libquicktime:1.2.4