CVE-2007-4677 Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size when parsing the color table atom (CTAB) in a movie file, rel...
HighCVSS 9.3
EPSS 46.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size when parsing the color table atom (CTAB) in a movie file, related to the CTAB RGB values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x | = 10.3.9 | No fix listed |
| apple mac os x | = 10.4.10 | No fix listed |
| apple mac os x | = 10.5 | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- docs.info.apple.com vendor-advisory
- APPLE-SA-2007-11-05 vendor-advisory
- 27523 third-party-advisory
- 3352 third-party-advisory
- VU#445083 third-party-advisory us-government-resource
- 38544 broken-link vdb-entry
- 20071105 ZDI-07-065: Apple QuickTime Color Table RGB Parsing Heap Corruption Vulnerability mailing-list third-party-advisory vdb-entry
- 26338 third-party-advisory vdb-entry
- 1018894 third-party-advisory vdb-entry
- TA07-310A third-party-advisory us-government-resource
- ADV-2007-3723 third-party-advisory vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- quicktime-colortable-atom-bo(38283) third-party-advisory vdb-entry