CVE-2012-0666: Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attacker...

Security readout for executives and security teams

This is an old Apple QuickTime for Windows flaw in the browser plugin. If a user’s vulnerable system processes a malicious QTMovie object, an attacker could crash QuickTime or run code on that user’s machine. The public bundle does not show active exploitation. Exposure is most likely on Windows endpoints with Apple QuickTime versions before 7.7.2 and the QuickTime plugin installed or enabled. Server exposure is not indicated by the provided sources. Treat as a legacy endpoint cleanup priority. The business risk is remote code execution on user workstations, but urgency depends on whether old QuickTime installations remain in use. Mitigation focus: Update Apple QuickTime for Windows to version 7.7.2 or later where applicable.; Disable or remove the QuickTime plugin where business use is not required.; Check Apple advisory HT5261 for vendor-specific update guidance..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.