GCVE-110-CERTCC-2010-309873

Advisory PublishedCVSS 9.0/10

Vulnetix · Advisory published November 10, 2010

Apple QuickTime contains a heap buffer overflow in the processing of JPEG2000 data, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.

Download JSON Open in Console

Risk Scores

CVSS 2.0

9.0/10

Critical · AV:N/AC:M/Au:N/C:C/I:C/A:P

certcc-cam

impact15population17exploitation0widely_known15score_current27.9703125ease_of_exploitation13

certcc-vrda

d1_impact4d1_population4d1_direct_report1

certcc-cvss-temporal-env

temporal_score7remediation_levelOFreport_confidenceCenvironmental_score7target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2010-3787

References

Apple QuickTime JPEG2000 heap buffer overflow

url

Apple QuickTime JPEG2000 heap buffer overflow

advisory

Apple QuickTime JPEG2000 heap buffer overflow

advisory

Apple QuickTime JPEG2000 heap buffer overflow

advisory

Apple QuickTime JPEG2000 heap buffer overflow

advisory

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON