CVE-2007-0462: Critical severity Apple QuickTime vulnerability

Published Jan 26, 2007

Updated

The GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PICT image with a malformed Alpha RGB (ARGB) record, which triggers memory corruption.

Affected Software

2 affected components

Apple QuickTime=7.1.3

Apple iOS and macOS=10.4.8

Event History

Jan 26, 2007

CVE Published

01:28 AM

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0462?

CVE-2007-0462 has a high severity rating due to its potential to cause application crashes and possibly arbitrary code execution.

How do I fix CVE-2007-0462?

To fix CVE-2007-0462, update to a newer version of QuickTime or Mac OS X that addresses this vulnerability.

What software is affected by CVE-2007-0462?

CVE-2007-0462 affects QuickTime 7.1.3 and Mac OS X 10.4.8 and earlier versions.

Can CVE-2007-0462 be exploited remotely?

Yes, CVE-2007-0462 can be exploited remotely through the use of a crafted PICT image.

What is the impact of CVE-2007-0462 on users?

The impact of CVE-2007-0462 includes application crashes and the potential execution of arbitrary code on affected systems.