First published: Mon Mar 05 2007(Updated: )
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MIDI file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple QuickTime | <=7.1.4 | |
Apple QuickTime | =3.0 | |
Apple QuickTime | =4.1.2 | |
Apple QuickTime | =5.0.1 | |
Apple QuickTime | =5.0.2 | |
Apple QuickTime | =6.0 | |
Apple QuickTime | =6.0.0 | |
Apple QuickTime | =6.0.1 | |
Apple QuickTime | =6.0.2 | |
Apple QuickTime | =6.1.0 | |
Apple QuickTime | =6.1.1 | |
Apple QuickTime | =6.2.0 | |
Apple QuickTime | =6.3.0 | |
Apple QuickTime | =6.4.0 | |
Apple QuickTime | =6.5.0 | |
Apple QuickTime | =6.5.1 | |
Apple QuickTime | =6.5.2 | |
Apple QuickTime | =7.0 | |
Apple QuickTime | =7.0.0 | |
Apple QuickTime | =7.0.1 | |
Apple QuickTime | =7.0.2 | |
Apple QuickTime | =7.0.3 | |
Apple QuickTime | =7.0.4 | |
Apple QuickTime | =7.1.0 | |
Apple QuickTime | =7.1.1 | |
Apple QuickTime | =7.1.2 | |
Apple QuickTime | =7.1.3 | |
Microsoft Windows | ||
Apple QuickTime | <=7.1.4 | |
Apple QuickTime | =4.1.2 | |
Apple QuickTime | =5.0.1 | |
Apple QuickTime | =5.0.2 | |
Apple QuickTime | =6.0.0 | |
Apple QuickTime | =6.0.1 | |
Apple QuickTime | =6.0.2 | |
Apple QuickTime | =6.1.0 | |
Apple QuickTime | =6.1.1 | |
Apple QuickTime | =6.2.0 | |
Apple QuickTime | =6.3.0 | |
Apple QuickTime | =6.4.0 | |
Apple QuickTime | =6.5.0 | |
Apple QuickTime | =6.5.1 | |
Apple QuickTime | =6.5.2 | |
Apple QuickTime | =7.0.0 | |
Apple QuickTime | =7.0.1 | |
Apple QuickTime | =7.0.2 | |
Apple QuickTime | =7.0.3 | |
Apple QuickTime | =7.0.4 | |
Apple QuickTime | =7.1.0 | |
Apple QuickTime | =7.1.1 | |
Apple QuickTime | =7.1.2 | |
Apple QuickTime | =7.1.3 | |
Apple iOS and macOS | =10.3.9 | |
Apple iOS and macOS | =10.4 | |
Apple iOS and macOS | =10.4.0 | |
Apple iOS and macOS | =10.4.1 | |
Apple iOS and macOS | =10.4.2 | |
Apple iOS and macOS | =10.4.3 | |
Apple iOS and macOS | =10.4.4 | |
Apple iOS and macOS | =10.4.5 | |
Apple iOS and macOS | =10.4.6 | |
Apple iOS and macOS | =10.4.7 | |
Apple iOS and macOS | =10.4.8 | |
Apple iOS and macOS | =10.4.9 | |
Apple iOS and macOS | =10.4.10 | |
Apple iOS and macOS | =10.4.11 | |
Apple iOS and macOS | =10.5 | |
Apple iOS and macOS | =10.5.0 | |
Apple iOS and macOS | =10.5.1 | |
Apple iOS and macOS | =10.5.2 | |
Apple iOS and macOS | =10.5.3 | |
Apple iOS and macOS | =10.5.4 | |
Apple iOS and macOS | =10.5.5 | |
Apple iOS and macOS | =10.5.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-0712 is considered critical due to its potential for remote code execution and denial of service.
To fix CVE-2007-0712, upgrade Apple QuickTime to version 7.1.5 or later.
CVE-2007-0712 affects Apple QuickTime versions prior to 7.1.5 on both Windows and Mac.
Yes, CVE-2007-0712 can be exploited remotely through crafted MIDI files.
CVE-2007-0712 is a heap-based buffer overflow vulnerability.