CVE-2007-4672: Buffer Overflow
Published Nov 7, 2007
·Updated
Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image.
Affected Software
6 affected components
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.4.9
Apple iOS and macOS=10.5
Microsoft Windows Vista
Microsoft Windows XP=sp2
Apple QuickTime<=7.2
Event History
Nov 7, 2007
CVE Published
11:46 PM
Data Sourced
11:46 PM
DescriptionWeaknessAffected Software
Nov 8, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4672?
CVE-2007-4672 has a high severity rating due to its potential to allow remote code execution.
2
How do I fix CVE-2007-4672?
To fix CVE-2007-4672, upgrade your Apple QuickTime Player to version 7.3 or later.
3
Which versions of Apple QuickTime are affected by CVE-2007-4672?
CVE-2007-4672 affects Apple QuickTime versions up to and including 7.2.
4
Can CVE-2007-4672 be exploited remotely?
Yes, CVE-2007-4672 can be exploited remotely through specially crafted PICT images.
5
What platforms are vulnerable to CVE-2007-4672?
CVE-2007-4672 specifically affects Apple QuickTime on various versions of Mac OS X and Windows XP SP2.