CVE-2010-0528
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or...
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value.
Exploit likelihood
What each source reports
NVD Score used
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value.
- Record
CVE-2010-0528- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value.
- Record
CVE-2010-0528- Updated
- 2026-11-02
EUVDEUVD-2010-0559 No score
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value.
- Record
EUVD-2010-0559- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qqh6-qfcc-jm42 No score
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or...
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value.
- Record
GHSA-qqh6-qfcc-jm42- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0528 is a high vulnerability (CVSS 9.3) in Apple Quicktime, published March 31, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.88%, the 93rd percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6989
securityfocus.com/archive/1/510518/100/0/threaded
lists.apple.com/archives/security-announce/2010//Mar/msg00002.html
zerodayinitiative.com/advisories/ZDI-10-042
nvd.nist.gov/vuln/detail/CVE-2010-0528
github.com/advisories/GHSA-qqh6-qfcc-jm42