CVE-2007-2394

Apple Quicktime <7.2 - RCE

Title source: llm

Description

Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.

Exploits (2)

exploitdb WORKING POC VERIFIED
by David Vaartjes · textdosmultiple
https://www.exploit-db.com/exploits/4359
exploitdb WORKING POC VERIFIED
by Wolf · perlremotemultiple
https://www.exploit-db.com/exploits/30292

Scores

EPSS 0.4333
EPSS Percentile 97.5%

Details

Status published
Products (12)
apple/quicktime
apple/quicktime 7.0
apple/quicktime 7.0.1
apple/quicktime 7.0.2
apple/quicktime 7.0.3
apple/quicktime 7.0.4
apple/quicktime 7.1
apple/quicktime 7.1.1
apple/quicktime 7.1.2
apple/quicktime 7.1.3
... and 2 more
Published Jul 15, 2007
Tracked Since Feb 18, 2026