CVE-2006-4381

Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie.

• http://docs.info.apple.com/article.html?artnum=304357
• http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.htmlPatch
• http://secunia.com/advisories/21893
• http://securityreason.com/securityalert/1551
• http://securitytracker.com/id?1016830
• http://secway.org/advisory/AD20060912.txtExploit, Patch, Vendor Advisory
• http://www.osvdb.org/28774
• http://www.securityfocus.com/archive/1/445830/100/0/threaded
• http://www.securityfocus.com/bid/19976Exploit, Patch
• http://www.vupen.com/english/advisories/2006/3577
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28928
• http://docs.info.apple.com/article.html?artnum=304357
• http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.htmlPatch
• http://secunia.com/advisories/21893
• http://securityreason.com/securityalert/1551
• http://securitytracker.com/id?1016830
• http://secway.org/advisory/AD20060912.txtExploit, Patch, Vendor Advisory
• http://www.osvdb.org/28774
• http://www.securityfocus.com/archive/1/445830/100/0/threaded
• http://www.securityfocus.com/bid/19976Exploit, Patch
• http://www.vupen.com/english/advisories/2006/3577
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28928

Published

Sep 12, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4375PHP remote file inclusion vulnerability in contxtd.class.php…
• CVE-2006-4376Multiple cross-site scripting (XSS) vulnerabilities in Guder…
• CVE-2006-4377Multiple SQL injection vulnerabilities in Guder und Koch Net…
• CVE-2006-4378Multiple PHP remote file inclusion vulnerabilities in the Rs…
• CVE-2006-4379Stack-based buffer overflow in the SMTP Daemon in Ipswitch C…
• CVE-2006-4380MySQL before 4.1.13 allows local users to cause a denial of …
• CVE-2006-4382Multiple buffer overflows in Apple QuickTime before 7.1.3 al…
• CVE-2006-4384Heap-based buffer overflow in Apple QuickTime before 7.1.3 a…
• CVE-2006-4385Buffer overflow in Apple QuickTime before 7.1.3 allows user-…
• CVE-2006-4386Integer overflow in Apple QuickTime before 7.1.3 allows user…
• CVE-2006-4387Apple Mac OS X 10.4 through 10.4.7, when the administrator c…
• CVE-2006-4388Integer overflow in Apple QuickTime before 7.1.3 allows user…