CVE-2007-2394 Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file...
HighCVSS 9.3
EPSS 12.1%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | All versions | No fix listed |
| apple quicktime | = 7.0 | No fix listed |
| apple quicktime | = 7.0.1 | No fix listed |
| apple quicktime | = 7.0.2 | No fix listed |
| apple quicktime | = 7.0.3 | No fix listed |
| apple quicktime | = 7.0.4 | No fix listed |
| apple quicktime | = 7.1 | No fix listed |
| apple quicktime | = 7.1.1 | No fix listed |
| apple quicktime | = 7.1.2 | No fix listed |
| apple quicktime | = 7.1.3 | No fix listed |
| apple quicktime | = 7.1.4 | No fix listed |
| apple quicktime | = 7.1.5 | No fix listed |
References
- docs.info.apple.com
- 20070711 Apple QuickTime SMIL File Processing Integer Overflow Vulnerability patch third-party-advisory
- APPLE-SA-2007-07-11 patch vendor-advisory
- 36134 vdb-entry
- 26034 patch third-party-advisory vendor-advisory
- 20070717 Re: iDefense Security Advisory 07.11.07: Apple QuickTime SMIL File Processing Integer Overflow Vulnerability mailing-list
- 24873 vdb-entry
- 1018373 vdb-entry
- TA07-193A third-party-advisory us-government-resource
- ADV-2007-2510 vdb-entry
- quicktime-smil-overflow(35357) vdb-entry