CVE-2007-6166: Buffer Overflow
Published Nov 29, 2007
·Updated
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.
Affected Software
40 affected components
Apple QuickTime<=7.3
Apple QuickTime
Apple QuickTime=3.0
Apple QuickTime=4.1.2
Apple QuickTime=5.0
Apple QuickTime=5.0.1
Apple QuickTime=5.0.2
Apple QuickTime=6.0
Apple QuickTime=6.1
Apple QuickTime=6.5
Apple QuickTime=6.5.1
Apple QuickTime=6.5.2
Apple QuickTime=7.0
Apple QuickTime=7.0.1
Apple QuickTime=7.0.2
Apple QuickTime=7.0.3
Apple QuickTime=7.0.4
Apple QuickTime=7.1
Apple QuickTime=7.1.1
Apple QuickTime=7.1.2
Apple QuickTime=7.1.3
Apple QuickTime=7.1.4
Apple QuickTime=7.1.5
Apple QuickTime=7.1.6
Apple QuickTime=7.2
Microsoft Windows Vista
Microsoft Windows XP=sp2
Apple Safari
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.4.9
Apple iOS and macOS=10.5
Apple iOS and macOS=10.5.0
Apple iOS and macOS=10.5.1
Apple iOS and macOS=10.5.2
Apple iOS and macOS=10.5.3
Apple iOS and macOS=10.5.4
Apple iOS and macOS=10.5.5
Apple iOS and macOS=10.5.6
Apple iOS and macOS=10.5.7
Apple iOS and macOS=10.5.8
Event History
Nov 29, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
01:46 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2007-6166?
CVE-2007-6166 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2007-6166?
The recommended fix for CVE-2007-6166 is to upgrade Apple QuickTime to version 7.3.1 or later.
3
Which versions of Apple QuickTime are affected by CVE-2007-6166?
CVE-2007-6166 affects all versions of Apple QuickTime prior to version 7.3.1.
4
What type of vulnerability is CVE-2007-6166 classified as?
CVE-2007-6166 is classified as a stack-based buffer overflow vulnerability.
5
Can CVE-2007-6166 affect users on Windows Vista?
No, CVE-2007-6166 does not affect users on Windows Vista or later operating systems.