CVE-2007-6166 Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbi...
HighCVSS 9.3
EPSS 41.8%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | <= 7.3 | No fix listed |
| apple quicktime | All versions | No fix listed |
| apple quicktime | = 3.0 | No fix listed |
| apple quicktime | = 4.1.2 | No fix listed |
| apple quicktime | = 5.0 | No fix listed |
| apple quicktime | = 5.0.1 | No fix listed |
| apple quicktime | = 5.0.2 | No fix listed |
| apple quicktime | = 6.0 | No fix listed |
| apple quicktime | = 6.1 | No fix listed |
| apple quicktime | = 6.5 | No fix listed |
| apple quicktime | = 6.5.1 | No fix listed |
| apple quicktime | = 6.5.2 | No fix listed |
| apple quicktime | = 7.0 | No fix listed |
| apple quicktime | = 7.0.1 | No fix listed |
| apple quicktime | = 7.0.2 | No fix listed |
| apple quicktime | = 7.0.3 | No fix listed |
| apple quicktime | = 7.0.4 | No fix listed |
| apple quicktime | = 7.1 | No fix listed |
| apple quicktime | = 7.1.1 | No fix listed |
| apple quicktime | = 7.1.2 | No fix listed |
| apple quicktime | = 7.1.3 | No fix listed |
| apple quicktime | = 7.1.4 | No fix listed |
| apple quicktime | = 7.1.5 | No fix listed |
| apple quicktime | = 7.1.6 | No fix listed |
| apple quicktime | = 7.2 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apple Safari | All versions | No fix listed |
References
- docs.info.apple.com
- APPLE-SA-2007-12-13 vendor-advisory
- 27755 third-party-advisory vendor-advisory
- 29182 third-party-advisory vendor-advisory
- GLSA-200803-08 vendor-advisory
- 3410 third-party-advisory
- www.beskerming.com
- VU#659761 third-party-advisory us-government-resource
- 26549 vdb-entry
- 26560 vdb-entry
- 1018989 vdb-entry
- TA07-334A third-party-advisory us-government-resource
- ADV-2007-3984 vdb-entry vendor-advisory
- quicktime-rtsp-contenttype-bo(38604) vdb-entry
- 4648 exploit
- 6013 exploit