CVE-2007-4676 Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn...
HighCVSS 9.3
EPSS 46.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x | = 10.3.9 | No fix listed |
| apple mac os x | = 10.4.10 | No fix listed |
| apple mac os x | = 10.5 | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- docs.info.apple.com vendor-advisory
- APPLE-SA-2007-11-05 vendor-advisory
- 38546 broken-link vdb-entry
- 27523 third-party-advisory
- 3351 third-party-advisory
- VU#690515 third-party-advisory us-government-resource
- 20071105 ZDI-07-066: Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability mailing-list third-party-advisory vdb-entry
- 20071105 ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability mailing-list third-party-advisory vdb-entry
- 26345 third-party-advisory vdb-entry
- 1018894 third-party-advisory vdb-entry
- TA07-310A third-party-advisory us-government-resource
- ADV-2007-3723 third-party-advisory vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- quicktime-packbitsrgn-bo(38280) third-party-advisory vdb-entry
- quicktime-poly-type-bo(38281) third-party-advisory vdb-entry