Unscored severity · published Jul 15, 2007
CVE-2007-2394
Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author…
–
CVSS
12.1%
EPSS
No
On KEV
Description
Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.
Exploitation
Is it being used?
Exploit prediction (EPSS)12.1% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QU
Quicktime · Apple
7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.1; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2394
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2394
docs.info.apple.com
http://docs.info.apple.com/article.html?artnum=305947
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=556
Patch
http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
osvdb.org
http://osvdb.org/36134
Patch
http://secunia.com/advisories/26034
www.securityfocus.com
http://www.securityfocus.com/archive/1/473882/100/100/threaded
More from Quicktime
9.8
CVE-2011-3428
Buffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute arbitrary code
7.8
CVE-2017-2218
Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory
6.6
CVE-2015-7117
Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a…
6.6
CVE-2015-7092
Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted TXXX…
6.6
CVE-2015-7091
Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a…