cpe:/a:apple:quicktime:7.0 cpe:/a:apple:quicktime:7.0.1 cpe:/a:apple:quicktime:7.0.2 cpe:/a:apple:quicktime:7.0.3 cpe:/a:apple:quicktime:7.0.4 CVE-2006-2238 2006-05-12T17:02:00.000-04:00 2017-07-19T21:31:17.770-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2006-05-15T15:17:00.000-04:00 ALLOWS_OTHER_ACCESS SECTRACK 1016067 BID 17953 SECUNIA 20069 OSVDB 24820 VUPEN ADV-2006-1778 APPLE APPLE-SA-2006-05-11 CERT TA06-132B MISC http://www.security-protocols.com/sp-x27-advisory.php XF quicktime-bmp-bo(26402) Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted BMP file that triggers the overflow in the ReadBMP function. NOTE: this issue was originally included as item 3 in CVE-2006-1983, but it has been given a separate identifier because it is a distinct issue.