CVE-2007-4675: Buffer Overflow
Published Nov 7, 2007
·Updated
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.
Affected Software
6 affected components
Apple QuickTime<7.3
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.4.10
Apple iOS and macOS=10.5
Microsoft Windows Vista
Microsoft Windows XP=sp2
Remediation
Event History
Nov 7, 2007
CVE Published
11:46 PM
Data Sourced
11:46 PM
DescriptionWeaknessAffected Software
Nov 8, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4675?
CVE-2007-4675 has a high severity level due to its potential for allowing remote code execution.
2
How do I fix CVE-2007-4675?
To fix CVE-2007-4675, update QuickTime to version 7.3 or later.
3
Which versions of QuickTime are affected by CVE-2007-4675?
CVE-2007-4675 affects QuickTime versions prior to 7.3.
4
What type of vulnerability is CVE-2007-4675?
CVE-2007-4675 is classified as a heap-based buffer overflow vulnerability.
5
Can CVE-2007-4675 be exploited via a network?
Yes, CVE-2007-4675 can be exploited by attackers through malicious QuickTime VR movie files over a network.