CVE-2007-4675 Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Realit...
HighCVSS 9.3
EPSS 32.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x | = 10.3.9 | No fix listed |
| apple mac os x | = 10.4.10 | No fix listed |
| apple mac os x | = 10.5 | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- blog.48bits.com third-party-advisory
- docs.info.apple.com vendor-advisory
- 20071105 Apple QuickTime Panorama Sample Atom Heap Buffer Overflow Vulnerability broken-link third-party-advisory
- APPLE-SA-2007-11-05 patch vendor-advisory
- 27523 third-party-advisory
- www.48bits.com third-party-advisory
- 38545 broken-link vdb-entry
- 20071110 [48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow mailing-list third-party-advisory vdb-entry
- 26342 third-party-advisory vdb-entry
- 1018894 third-party-advisory vdb-entry
- TA07-310A third-party-advisory us-government-resource
- ADV-2007-3723 third-party-advisory vdb-entry
- quicktime-qtvr-bo(38282) third-party-advisory vdb-entry