CVE-2007-0716: Buffer Overflow
Published Mar 5, 2007
·Updated
Stack-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QTIF file.
Affected Software
10 affected components
QuickTime Player=7.0.3
QuickTime Player=7.0.1
QuickTime Player=7.0
QuickTime Player=7.0.2
QuickTime Player=7.0.4
QuickTime Player=7.1.2
QuickTime Player=7.1
QuickTime Player=7.1.1
QuickTime Player=7.1.4
QuickTime Player=7.1.3
Remediation
Patch Available
Event History
Mar 5, 2007
CVE Published
10:19 PM
Mar 6, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0716?
CVE-2007-0716 is considered a high severity vulnerability due to its potential for remote code execution and denial of service.
2
How do I fix CVE-2007-0716?
To fix CVE-2007-0716, update Apple QuickTime to version 7.1.5 or later.
3
What type of attack does CVE-2007-0716 enable?
CVE-2007-0716 enables remote user-assisted attackers to initiate a stack-based buffer overflow.
4
Which versions of QuickTime are affected by CVE-2007-0716?
Apple QuickTime versions 7.0 through 7.1.4 are affected by CVE-2007-0716.
5
What file type is associated with the CVE-2007-0716 vulnerability?
The CVE-2007-0716 vulnerability is associated with crafted QTIF files.