Quicktime Streaming Server
Vendor:
First CVE: Mar 7, 2003 · Active for 23 years
16
Total CVEs
More Total CVEs than 92% of tracked products
5.3
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
5.1
Avg CVSS
Higher Avg CVSS than 9% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Quicktime Streaming Server over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 7, 2003
23 years ago
Most Recent CVE
Jan 10, 2005
7,865 days ago
CVE Severity & Scoring
Quicktime Streaming Server16 CVEs
19%
50%
31%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network1 (6.3%)
Unknown15 (93.8%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (6.3%)
High0 (0.0%)
Unknown15 (93.8%)
User Interaction
None1 (6.3%)
Unknown15 (93.8%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (6.3%)
Unknown15 (93.8%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2003-0050HIGH parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters. | Mar 7, 2003 | 7.5 | 74 | NO | YES |
CVE-2003-1414MEDIUM Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via | Dec 31, 2003 | 4.3 | 22 | NO | YES |
CVE-2004-1083HIGH Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which a | Dec 3, 2004 | 7.5 | 20 | NO | NO |
CVE-2004-1086HIGH Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file. | Dec 2, 2004 | 7.5 | 20 | NO | NO |
CVE-2003-0054HIGH Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script i | Mar 7, 2003 | 7.5 | 20 | NO | NO |
CVE-2004-1123MEDIUM Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contai | Jan 10, 2005 | 5.0 | 19 | NO | NO |
CVE-2004-1088HIGH Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information. | Dec 2, 2004 | 7.5 | 19 | NO | NO |
CVE-2004-1084MEDIUM Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data | Dec 2, 2004 | 5.0 | 15 | NO | NO |
CVE-2003-0051MEDIUM parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's install | Mar 7, 2003 | 5.0 | 15 | NO | NO |
CVE-2003-0052MEDIUM parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories. | Mar 7, 2003 | 5.0 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
6.2% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
12.5% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Quicktime Streaming Server
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.1.1 | 16 | 5.1 | 5.8% | 0 | 2 |