CVE-2007-4676: Buffer Overflow
Published Nov 7, 2007
·Updated
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
Affected Software
6 affected components
Apple QuickTime<7.3
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.4.10
Apple iOS and macOS=10.5
Microsoft Windows Vista
Microsoft Windows XP=sp2
Event History
Nov 7, 2007
CVE Published
11:46 PM
Data Sourced
11:46 PM
DescriptionWeaknessAffected Software
Nov 8, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4676?
CVE-2007-4676 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2007-4676?
To fix CVE-2007-4676, update Apple QuickTime to version 7.3 or later.
3
What types of attacks are possible with CVE-2007-4676?
CVE-2007-4676 allows attackers to execute arbitrary code through malformed PICT images.
4
Which versions of Apple QuickTime are affected by CVE-2007-4676?
CVE-2007-4676 affects all versions of Apple QuickTime prior to 7.3.
5
Can CVE-2007-4676 affect users on Windows operating systems?
Yes, CVE-2007-4676 can affect users on both Windows XP and Windows Vista if they have an affected version of QuickTime.