CVE-2011-3248
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-3248
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font table in a QuickTime movie file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apple QuickTime 整数符号漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apple QuickTime是美国苹果（Apple）公司开发的一款多媒体播放软件。该软件能够处理数字视频、媒体段落等多种资源。 Apple QuickTime 7.7.1之前的版本中存在整数符号漏洞。远程攻击者可借助QuickTime电影文件中一个特制的字体表格执行任意代码或者导致拒绝服务（应用程序崩溃）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2011-3248
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-3248
Please Login to view more intelligence information
- http://support.apple.com/kb/HT5130x_refsource_CONFIRM
- http://support.apple.com/kb/HT5016x_refsource_CONFIRM
- http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.htmlvendor-advisoryx_refsource_APPLE
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16012vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2011-3248
Same Patch Batch · n/a · 2011-10-28 · 9 CVEs total
| CVE-2011-1360 | IBM HTTP Server 跨站脚本攻击漏洞 | |
| CVE-2011-1371 | IBM WebSphere ILOG Rule Team Server 跨站脚本攻击漏洞 | |
| CVE-2011-2830 | Google Chrome 拒绝服务漏洞 | |
| CVE-2011-3247 | Apple QuickTime PICT文件整数溢出漏洞 | |
| CVE-2011-3249 | Apple QuickTime FLC编码整数溢出漏洞 | |
| CVE-2011-3250 | Apple QuickTime ‘JPEG2000’编码整数溢出漏洞 | |
| CVE-2011-3251 | Apple QuickTime TKHD 元素处理远程代码执行漏洞 | |
| CVE-2011-3640 | Google Chrome 代码问题漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out- - CVE-2026-8187
Open5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumption - CVE-2026-6667
PgBouncer missing authorization check in KILL_CLIENT admin c - CVE-2026-6666
PgBouncer crash in kill_pool_logins_server_error - CVE-2026-6665
PgBouncer buffer overflow in SCRAM
V. Comments for CVE-2011-3248
No comments yet