CVE-2007-0462

published 2007-01-26

CVE-2007-0462: The _GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

EXPLOIT

The _GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PICT image with a malformed Alpha RGB (ARGB) record, which triggers memory corruption.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apple	mac_os_x	—	—
apple	quicktime	—	—