CVE-2007-2394
Apple Quicktime <7.2 - RCE
Title source: llmDescription
Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by David Vaartjes · textdosmultiple
https://www.exploit-db.com/exploits/4359
exploitdb
WORKING POC
VERIFIED
by Wolf · perlremotemultiple
https://www.exploit-db.com/exploits/30292
References (11)
Scores
EPSS
0.4333
EPSS Percentile
97.5%
Details
Status
published
Products (12)
apple/quicktime
apple/quicktime
7.0
apple/quicktime
7.0.1
apple/quicktime
7.0.2
apple/quicktime
7.0.3
apple/quicktime
7.0.4
apple/quicktime
7.1
apple/quicktime
7.1.1
apple/quicktime
7.1.2
apple/quicktime
7.1.3
... and 2 more
Published
Jul 15, 2007
Tracked Since
Feb 18, 2026