CVE-2007-4676

Apple QuickTime <7.3 - Buffer Overflow

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.

References (16)

Core 16
Core References
Third Party Advisory, VDB Entry x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-07-066.html
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA07-310A.html
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=306896
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38280
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3351
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/38546
Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27523
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/690515
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/483311/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/483313/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018894
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3723
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38281
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26345
Third Party Advisory, VDB Entry x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-07-067.html

Scores

EPSS 0.4666
EPSS Percentile 98.7%

Details

CWE
CWE-119
Status published
Products (5)
apple/mac_os_x 10.3.9
apple/mac_os_x 10.4.10
apple/mac_os_x 10.5
microsoft/windows_vista
microsoft/windows_xp
Published Nov 07, 2007
Tracked Since Feb 18, 2026