{"id":"CVE-2017-9125","aliases":["DEBIAN-CVE-2017-9125","DLA-1042-1","EUVD-2017-18063","GHSA-98c3-vfx7-qx2g","MGASA-2017-0220","SUSE-SU-2017:1769-1","SUSE-SU-2017:1988-1","UBUNTU-CVE-2017-9125","USN-4545-1","openSUSE-SU-2024:10978-1"],"status":"published","title":"The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers...","description":"The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04911,"percentile":0.92167,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-125"],"published":"2017-06-12T06:00:00Z","modified":"2026-09-01T20:03:51Z","exploits":[{"source":"exploitdb","id":"EDB-42148","title":"libquicktime 1.2.4 - Denial of Service","type":"dos","platform":"linux","date":"2017-06-09","url":"https://www.exploit-db.com/exploits/42148"}],"fixes":[{"ecosystem":"Debian:12","package":"libquicktime","fixed_in":["2:1.2.4-11"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libquicktime","fixed_in":["2:1.2.4-11"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libquicktime","fixed_in":["2:1.2.4-11"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libquicktime","fixed_in":["2:1.2.4-7+deb8u1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.4-11"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.4-11"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.4-11"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.4-3+deb7u2"}]}],"versions":["2:1.2.4-3","2:1.2.4-3+deb7u1"],"bundled":7},{"source":"osv","ecosystem":"Mageia:5","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-10.2.mga5"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-13.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-13.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-13.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-13.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-13.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-6.5.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.4-7+deb8u1ubuntu0.1"}]}],"versions":["2:1.2.4-7build2","2:1.2.4-7build3","2:1.2.4-7+deb8u1build0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libquicktime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.4-7+deb8u1ubuntu0.1"}]}],"versions":["2:1.2.4-7build2","2:1.2.4-7build3","2:1.2.4-7+deb8u1build0.16.04.1"],"bundled":7}],"products":[{"vendor":"libquicktime","product":"libquicktime"}],"references":[{"url":"https://www.exploit-db.com/exploits/42148/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry","advisory","report"]},{"url":"https://usn.ubuntu.com/4545-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9125"},{"url":"https://usn.ubuntu.com/4545-1"},{"url":"https://www.exploit-db.com/exploits/42148"},{"url":"https://github.com/advisories/GHSA-98c3-vfx7-qx2g"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-9125","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0220.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21196","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2017-07/msg00035.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171769-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1044000","tags":["report"]},{"url":"https://bugzilla.suse.com/1044002","tags":["report"]},{"url":"https://bugzilla.suse.com/1044006","tags":["report"]},{"url":"https://bugzilla.suse.com/1044008","tags":["report"]},{"url":"https://bugzilla.suse.com/1044009","tags":["report"]},{"url":"https://bugzilla.suse.com/1044077","tags":["report"]},{"url":"https://bugzilla.suse.com/1044122","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9128","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171988-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1022805","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2399","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-9125","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4545-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9128","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-9125","description":"The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.","status":"published","published":"2017-06-12T06:00:00Z","modified":"2024-08-05T16:55:22.297Z","updated_at":"2026-11-02T14:33:13.96587Z"}],"euvd":[{"id":"EUVD-2017-18063","description":"The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.","status":"published","published":"2017-06-12T06:00:00Z","modified":"2024-08-05T16:55:22Z","updated_at":"2026-11-03T02:23:28.642509Z"}],"ghsa":[{"id":"GHSA-98c3-vfx7-qx2g","title":"The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers...","description":"The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.","status":"published","published":"2022-05-13T01:15:22Z","modified":"2025-04-20T03:39:51Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:01:47.903342Z"}],"nvd":[{"id":"CVE-2017-9125","description":"The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.","status":"published","published":"2017-06-12T06:29:00.353Z","modified":"2026-06-17T01:27:31.333Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:03:50.782497Z"}],"osv":[{"id":"CVE-2017-9125","description":"The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.","status":"published","published":"2017-06-12T06:29:00.353Z","modified":"2026-04-16T06:17:53.34951429Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:06.868403Z"},{"id":"DEBIAN-CVE-2017-9125","description":"The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.","status":"published","published":"2017-06-12T06:29:00.353Z","modified":"2026-09-01T20:03:51.443695436Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"UBUNTU-CVE-2017-9125","description":"The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.","status":"published","published":"2017-06-12T06:29:00Z","modified":"2026-04-22T11:35:56.448594Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"DLA-1042-1","title":"libquicktime - security update","status":"published","published":"2017-07-28T00:00:00Z","modified":"2026-03-09T01:01:44.998136Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"MGASA-2017-0220","title":"Updated libquicktime packages fix security vulnerabilities","description":"A DoS in quicktime_read_moov function in moov.c via acrafted mp4 file\nwas fixed (CVE-2017-9122).\n\nAn invalid memory read in lqt_frame_duration via a crafted mp4 file was\nfixed (CVE-2017-9123).\n\nA NULL pointer dereference in quicktime_match_32 via a crafted mp4 file\nwas fixed (CVE-2017-9124).\n\nA DoS in lqt_frame_duration function in lqt_quicktime.c via crafted mp4\nfile was fixed (CVE-2017-9125).\n\nA heap-based buffer overflow in quicktime_read_dref_table via a crafted\nmp4 file was fixed (CVE-2017-9126).\n\nA heap-based buffer overflow in quicktime_user_atoms_read_atom via a\ncrafted mp4 file was fixed (CVE-2017-9127).\n\nA heap-based buffer over-read in quicktime_video_width via a crafted mp4\nfile was fixed (CVE-2017-9128).\n","status":"published","published":"2017-07-25T22:07:12Z","modified":"2026-04-16T06:23:31.499767506Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10978-1","title":"libquicktime-1.2.4+git20180804.fff99cd-2.10 on GA media","description":"These are all security issues fixed in the libquicktime-1.2.4+git20180804.fff99cd-2.10 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:31:44.04523Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2017:1769-1","title":"Security update for libquicktime","description":"This update for libquicktime fixes the following issues:\n\n* CVE-2017-9122: A DoS in quicktime_read_moov function in moov.c via acrafted mp4 file was fixed. (bsc#1044077)\n* CVE-2017-9123: An invalid memory read in lqt_frame_duration via a crafted mp4 file was fixed. (bsc#1044009)\n* CVE-2017-9124: A NULL pointer dereference in quicktime_match_32 via a crafted mp4 file was fixed. (bsc#1044008)\n* CVE-2017-9125: A DoS in lqt_frame_duration function in lqt_quicktime.c via crafted mp4 file was fixed. (bsc#1044122)\n* CVE-2017-9126: A heap-based buffer overflow in quicktime_read_dref_table via a crafted mp4 file was fixed. (bsc#1044006)\n* CVE-2017-9127: A heap-based buffer overflow in quicktime_user_atoms_read_atom via a crafted mp4 file was fixed. (bsc#1044002)\n* CVE-2017-9128: A heap-based buffer over-read in quicktime_video_width via a crafted mp4 file was fixed. (bsc#1044000)\n","status":"published","published":"2017-07-04T14:42:04Z","modified":"2026-02-04T03:49:10.630631Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:1988-1","title":"Security update for libquicktime","description":"This update for libquicktime fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2017-9122: A DoS in quicktime_read_moov function in moov.c via a crafted mp4 file was fixed. (bsc#1044077)\n- CVE-2017-9123: An invalid memory read in lqt_frame_duration via a crafted mp4 file was fixed. (bsc#1044009)\n- CVE-2017-9124: A NULL pointer dereference in quicktime_match_32 via a crafted mp4 file was fixed. (bsc#1044008)\n- CVE-2017-9125: A DoS in lqt_frame_duration function in lqt_quicktime.c via crafted mp4 file was fixed. (bsc#1044122)\n- CVE-2017-9126: A heap-based buffer overflow in quicktime_read_dref_table via a crafted mp4 file was fixed. (bsc#1044006)\n- CVE-2017-9127: A heap-based buffer overflow in quicktime_user_atoms_read_atom via a crafted mp4 file was fixed. (bsc#1044002)\n- CVE-2017-9128: A heap-based buffer over-read in quicktime_video_width via a crafted mp4 file was fixed. (bsc#1044000)\n- CVE-2016-2399: Adjust fix to prevent endless loop when there are less than 256 bytes to read. (bsc#1022805)\n\n","status":"published","published":"2017-07-28T08:41:51Z","modified":"2026-02-04T02:54:44.304714Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-4545-1","title":"libquicktime vulnerabilities","description":"It was discovered that libquicktime incorrectly handled certain malformed\nMP4 files. If a user were tricked into opening a specially crafted MP4\nfile, a remote attacker could use this issue to cause a denial of service\n(resource exhaustion). (CVE-2017-9122)\n\nIt was discovered that libquicktime incorrectly handled certain malformed\nMP4 files. If a user were tricked into opening a specially crafted MP4\nfile, a remote attacker could use this issue to cause libquicktime to\ncrash, resulting in a denial of service. (CVE-2017-9123, CVE-2017-9124,\nCVE-2017-9126, CVE-2017-9127, CVE-2017-9128)\n\nIt was discovered that libquicktime incorrectly handled certain malformed\nMP4 files. If a user were tricked into opening a specially crafted MP4\nfile, a remote attacker could use this issue to cause a denial of service.\n(CVE-2017-9125)\n","status":"published","published":"2020-09-25T20:02:17Z","modified":"2026-04-22T10:07:58.740172Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}