CVE-2010-0529
Estado: ModificadaAlta (9.3)—
Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a BkPixPat opcode (0x12) containing crafted values that are used in a calculation for memory allocation.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 9.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 12%
- Percentil entre todas las CVEs puntuadas: 96
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-119
Referencias
- http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html
- http://www.securityfocus.com/archive/1/510569/100/0/threaded
- http://www.zerodayinitiative.com/advisories/ZDI-10-067
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6780
- http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html
- http://www.securityfocus.com/archive/1/510569/100/0/threaded
- http://www.zerodayinitiative.com/advisories/ZDI-10-067
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6780
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-0529",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "product-security@apple.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-03-31T18:30:00.343",
"references": [
{
"url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "product-security@apple.com"
},
{
"url": "http://www.securityfocus.com/archive/1/510569/100/0/threaded",
"source": "product-security@apple.com"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-10-067",
"source": "product-security@apple.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6780",
"source": "product-security@apple.com"
},
{
"url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/510569/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-10-067",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6780",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a BkPixPat opcode (0x12) containing crafted values that are used in a calculation for memory allocation."
},
{
"lang": "es",
"value": "El desbordamiento de búfer en la región heap de la memoria en el archivo QuickTime.qts en QuickTime de Apple anterior a versión 7.6.6 sobre Windows, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de una imagen PICT con un BkPixPat Opcode (0x12) que contiene valores diseñados que se utilizan en un cálculo para la asignación de memoria"
}
],
"lastModified": "2026-06-16T23:16:20.697",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B27C0810-E6C3-44D9-8EA1-BBCF0C681F71",
"versionEndIncluding": "7.6.0"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F4075B0-0F9F-466B-8521-2156849247C2"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8BF6A6A-F734-4395-9305-2E9F52EE888F"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFCB45F3-397E-42A8-8D08-ECF667939FF8"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F45B47BB-E14F-4437-8828-EF059496BF95"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B353211-F90E-4F38-9D0B-B8C7EC00E66F"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B8F4241-551B-492D-8602-06146B05CF13"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BA9C6F7-513B-426F-90AD-7E826433CEF1"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B709D68-8474-4AAE-AA11-777EF510E1AC"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DCEE583-6CD2-4098-9A2A-B006A5023318"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52AD56F9-0CE6-4949-9853-3274A2C81601"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "555B1A2A-95F5-4B06-8774-FF952BEC2FBB"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEA210F5-71F6-4528-B2B4-507AA4A435EB"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "081712FF-C6B8-423B-8F20-C79D25DE782F"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF045B49-11A3-447A-9D05-1E8794980A81"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "939BE521-A385-4A1A-B4B0-C4687751D4A5"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "304CFC80-E925-4CB8-8251-0FD0F09B8410"
},
{
"criteria": "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D56B932B-9593-44E2-B610-E4EB2143EB21"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3852BB02-47A1-40B3-8E32-8D8891A53114"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9B339C33-8896-4896-88FF-88E74FDBC543"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"evaluatorImpact": "Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html\r\n\r\n'This issue does not affect Mac OS X systems.'",
"sourceIdentifier": "product-security@apple.com"
}