CVEvulnerability
CVE-2007-4676
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-11-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
Affected configurations
• apple mac os x 10.3.9
• apple mac os x 10.4.10
• apple mac os x 10.5
• microsoft windows vista
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://docs.info.apple.com/article.html?artnum=306896 Vendor Advisory
- http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html Vendor Advisory
- http://osvdb.org/38546 Broken Link
- http://secunia.com/advisories/27523 Third Party Advisory
- http://securityreason.com/securityalert/3351 Third Party Advisory
- http://www.kb.cert.org/vuls/id/690515 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/483311/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/483313/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/26345 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018894 Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA07-310A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2007/3723 Third Party Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-066.html Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-067.html Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38280 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38281 Third Party Advisory, VDB Entry
- http://docs.info.apple.com/article.html?artnum=306896 Vendor Advisory
- http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html Vendor Advisory
- http://osvdb.org/38546 Broken Link
- http://secunia.com/advisories/27523 Third Party Advisory
- http://securityreason.com/securityalert/3351 Third Party Advisory
- http://www.kb.cert.org/vuls/id/690515 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/483311/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/483313/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/26345 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018894 Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA07-310A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2007/3723 Third Party Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-066.html Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-067.html Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38280 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38281 Third Party Advisory, VDB Entry