Approved changes feed: RSS · Atom

cpe:2.3:a:libquicktime:libquicktime:1.2.4:*:*:*:*:*:*:*

part: a version: 1.2.4 update: *

VendorLibquicktime (737defc7-bc55-5017-947d-b47786f63ddf)
ProductLibquicktime (12a6fef8-01f6-5a89-9a9d-7a072e46c286)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libquicktime purl2cpe 2026-06-01 10:14:33.505501
pkg:deb/ubuntu/libquicktime purl2cpe 2026-06-01 10:14:33.505504
pkg:github/tklebanoff/libquicktime-1.2.4 purl2cpe 2026-06-01 10:14:33.505507
pkg:rpm/opensuse/libquicktime purl2cpe 2026-06-01 10:14:33.505510
pkg:sourceforge/libquicktime purl2cpe 2026-06-01 10:14:33.505513

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9128 vulnerable 2026-06-08 05:10:09.367814 Details available
The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted mp4 file.
Published: 2017-06-12T06:00:00.000Z
Updated: 2024-08-05T16:55:22.409Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9127 vulnerable 2026-06-08 05:10:09.367542 Details available
The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
Published: 2017-06-12T06:00:00.000Z
Updated: 2024-08-05T16:55:22.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9126 vulnerable 2026-06-08 05:10:09.367253 Details available
The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
Published: 2017-06-12T06:00:00.000Z
Updated: 2024-08-05T16:55:22.327Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9125 vulnerable 2026-06-08 05:10:09.366954 Details available
The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.
Published: 2017-06-12T06:00:00.000Z
Updated: 2024-08-05T16:55:22.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9124 vulnerable 2026-06-08 05:10:09.366540 Details available
The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.
Published: 2017-06-12T06:00:00.000Z
Updated: 2024-08-05T16:55:22.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9123 vulnerable 2026-06-08 05:10:09.366223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9122 vulnerable 2026-06-08 05:10:09.365791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12145 vulnerable 2026-06-08 05:08:45.357173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12143 vulnerable 2026-06-08 05:08:45.356432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.