CVE-2001-0198: Apple Quicktime

High severity, CVSS 7.6. EPSS: 6.4% chance of exploitation in the next 30 days.

Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag.

Affected products

• Apple Quicktime: version 4.1.2 only

Published 2001-05-03. Last modified 2026-06-16.