CVE-2007-3750

Apple QuickTime < 7.3 - Remote Code Execution via Crafted STSD Atoms

Title source: llm

Description

Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via crafted Sample Table Sample Descriptor (STSD) atoms in a movie file.

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/38549

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/26341

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA07-310A.html

Vendor Advisory x_refsource_confirm

http://docs.info.apple.com/article.html?artnum=306896

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/38268

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/27523

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1018894

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/3723

Scores

EPSS 0.0634

EPSS Percentile 92.8%

Details

CWE

CWE-119

Status published

Products (1)

apple/quicktime < 7.2

Published Nov 07, 2007

Tracked Since Feb 18, 2026