CVE-2007-0588: High severity Apple QuickTime vulnerability

Published Jan 30, 2007

Updated

The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption in the GetSrcBits32ARGB function. NOTE: this issue might overlap CVE-2007-0462.

Affected Software

2 affected components

Apple QuickTime=7.1.3

Apple iOS and macOS=10.4.8

Event History

Jan 30, 2007

CVE Published

06:28 PM

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0588?

CVE-2007-0588 has a medium severity rating due to its potential to cause application crashes and possible arbitrary code execution.

How do I fix CVE-2007-0588?

To mitigate CVE-2007-0588, users should update Apple QuickTime to the latest version available for their operating system.

What systems are affected by CVE-2007-0588?

CVE-2007-0588 affects Apple QuickTime 7.1.3 and macOS 10.4.8 and earlier versions.

What type of attack does CVE-2007-0588 allow?

CVE-2007-0588 allows remote attackers to execute denial of service attacks and potentially execute arbitrary code through a crafted PICT file.

Can CVE-2007-0588 be exploited remotely?

Yes, CVE-2007-0588 can be exploited remotely by sending a malicious PICT file to users of the affected software.