CVE Feed

    Dashboard / CVE / CVE-2017-9125

    CVE-2017-9125

    The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.

    Published:Jun 12, 2017
    Last Modified:Apr 20, 2025
    EPS:Jun 12, 2017
    EPSS Score:0.02879
    CVSS Score:6.5

    Affected Products

    Vendor
    Libquicktime
    Product
    Libquicktime

    Exploits

    https://www.exploit-db.com/exploits/42148

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2017-12143 (CVSS 6.5) — In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_info in lqt_quicktime.c,…
    CVE-2017-12145 (CVSS 6.5) — In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_ftyp in ftyp.c, which al…
    CVE-2017-9124 (CVSS 6.5) — The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of s…
    CVE-2017-9126 (CVSS 6.5) — The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a deni…
    CVE-2017-9127 (CVSS 6.5) — The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to ca…
    CVE-2017-9128 (CVSS 6.5) — The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a…
    CVE-2017-9122 (CVSS 6.5) — The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of …
    CVE-2017-9123 (CVSS 6.5) — The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a de…
    CVE-2016-2399 (CVSS 7.8) — Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attacke…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High