CVE-2007-2392 Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via a crafted movie file that triggers memory corruption.
HighCVSS 9.3
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via a crafted movie file that triggers memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | All versions | No fix listed |
| apple quicktime | = 7.0 | No fix listed |
| apple quicktime | = 7.0.1 | No fix listed |
| apple quicktime | = 7.0.2 | No fix listed |
| apple quicktime | = 7.0.3 | No fix listed |
| apple quicktime | = 7.0.4 | No fix listed |
| apple quicktime | = 7.1 | No fix listed |
| apple quicktime | = 7.1.1 | No fix listed |
| apple quicktime | = 7.1.2 | No fix listed |
| apple quicktime | = 7.1.3 | No fix listed |
| apple quicktime | = 7.1.4 | No fix listed |
| apple quicktime | = 7.1.5 | No fix listed |
References
- docs.info.apple.com patch
- APPLE-SA-2007-07-11 patch vendor-advisory
- 36136 vdb-entry
- 26034 patch third-party-advisory vendor-advisory
- VU#582681 third-party-advisory us-government-resource
- 24873 vdb-entry
- 1018373 vdb-entry
- TA07-193A third-party-advisory us-government-resource
- ADV-2007-2510 vdb-entry
- quicktime-moviefile-code-execution(35353) vdb-entry