Apple Quicktime Pictureviewer vulnerabilities

2 CVEs affecting Apple Quicktime Pictureviewer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-1106, published 2005-05-02.

More from Apple.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-0903, published 2005-05-02. Low severity, CVSS 2.6. EPSS: 2.1% chance of exploitation in the next 30 days. Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application crash) via a JPEG file with crafted Huffman Table (marker DHT) data.
• CVE-2005-1106, published 2005-05-02. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service (application crash) via a GIF image with the maximum depth start value, possibly triggering an…