CVE-2007-2394

published 2007-07-15

CVE-2007-2394: Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1)…

critical 9.3 CVSS 3.1

AV N AC M Au N C C I C A C

EXPLOIT

Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
apple	quicktime	—	—
apple	quicktime	—	—
apple	quicktime	—	—
apple	quicktime	—	—
apple	quicktime	—	—
apple	quicktime	—	—
apple	quicktime	—	—
apple	quicktime	—	—
apple	quicktime	—	—
apple	quicktime	—	—
apple	quicktime	—	—