CVE-2006-4389
Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via...
Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an operation on an uninitialized object.
Exploit likelihood
What each source reports
NVD Score used
Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an operation on an uninitialized object.
- Record
CVE-2006-4389- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an operation on an uninitialized object.
- Record
CVE-2006-4389- Updated
- 2026-11-02
EUVDEUVD-2006-4377 No score
Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an operation on an uninitialized object.
- Record
EUVD-2006-4377- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwx7-m89g-5mvc No score
Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via...
Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an operation on an uninitialized object.
- Record
GHSA-wwx7-m89g-5mvc- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4389 is a medium vulnerability (CVSS 5.1) in Apple Quicktime, published September 12, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.84%, the 94th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/445888/100/0/threaded
securitytracker.com/id?1016830
secunia.com/advisories/21893
osvdb.org/28769
security.gentoo.org/glsa/glsa-200803-08.xml
Show 10 moreShow less
securityreason.com/securityalert/1554
exchange.xforce.ibmcloud.com/vulnerabilities/28938
us-cert.gov/cas/techalerts/TA06-256A.html
docs.info.apple.com/article.html?artnum=304357
kb.cert.org/vuls/id/540348
lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html
vupen.com/english/advisories/2006/3577
nvd.nist.gov/vuln/detail/CVE-2006-4389
github.com/advisories/GHSA-wwx7-m89g-5mvc