Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

CVE-2005-1106: QuickTime Picture Viewer can crash when opening crafted GIF

CVE-2005-1106 · published 21 years ago
Summary

The Picture Viewer component of QuickTime for Windows can stop working if it processes a specially crafted GIF file. An attacker could send such a file to cause the application to close, resulting in a temporary loss of service. Install the latest QuickTime update or avoid opening GIF images from untrusted sources until a fix is applied.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
apple quicktime_pictureviewer 6.5.2
cpe:2.3:a:apple:quicktime_pictureviewer:6.5.2:*:*:*:*:*:*:*
Original advisory text
PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service (application crash) via a GIF image with the maximum depth start value, possibly triggering an inte...
PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service (application crash) via a GIF image with the maximum depth start value, possibly triggering an integer overflow.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
1% chance of attack within 30 days
Timeline
Published2 May 2005
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2005-1106 · NVD
Track software like this
Free during beta