CVE-2007-4677: Buffer Overflow
Published Nov 7, 2007
·Updated
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size when parsing the color table atom (CTAB) in a movie file, related to the CTAB RGB values.
Affected Software
6 affected components
Apple QuickTime<7.3
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.4.10
Apple iOS and macOS=10.5
Microsoft Windows Vista
Microsoft Windows XP=sp2
Event History
Nov 7, 2007
CVE Published
11:46 PM
Data Sourced
11:46 PM
DescriptionWeaknessAffected Software
Nov 8, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4677?
CVE-2007-4677 has been rated as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2007-4677?
To fix CVE-2007-4677, users should update Apple QuickTime to version 7.3 or later.
3
Who is affected by CVE-2007-4677?
CVE-2007-4677 affects users of Apple QuickTime prior to version 7.3, as well as certain versions of macOS and Windows.
4
What type of attack does CVE-2007-4677 facilitate?
CVE-2007-4677 facilitates remote code execution attacks through a heap-based buffer overflow.
5
What software is associated with CVE-2007-4677?
CVE-2007-4677 is associated with Apple QuickTime and impacts multiple operating systems including macOS and Windows.