FILE-IMAGE Apple Quicktime malformed FPX file memory corruption attempt
This event is generated when a memory corruption attempt is detected in Apple Quicktime.
Attempted Administrator Privilege Gain
CVSS base score 7.8
CVSS impact score 5.9
CVSS exploitability score 1.8
Confidentiality Impact HIGH
Integrity Impact HIGH
Availability Impact HIGH
CVE-2016-1767: QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1768.
Ease of attack
- Cisco's Talos Intelligence Group