First published: Wed Nov 07 2007(Updated: )
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via crafted Sample Table Sample Descriptor (STSD) atoms in a movie file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS and macOS | =10.3.9 | |
Apple iOS and macOS | =10.4.9 | |
Apple iOS and macOS | =10.5 | |
Microsoft Windows Vista | ||
Microsoft Windows XP | =sp2 | |
Apple QuickTime | <=7.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-3750 is considered a critical vulnerability due to the potential for remote code execution.
To mitigate CVE-2007-3750, upgrade Apple QuickTime to version 7.3 or later immediately.
CVE-2007-3750 affects Apple QuickTime versions up to and including 7.2 on various operating systems.
Yes, CVE-2007-3750 can be exploited remotely through specially crafted movie files.
Exploitation of CVE-2007-3750 may result in unexpected application crashes or arbitrary code execution.