CVE-2007-0717

Опубликовано: 05 мар. 2007

Источник: nvd

CVSS2: 5.8

EPSS Средний

Описание

Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QTIF file.

Ссылки

http://docs.info.apple.com/article.html?artnum=305149
Patch
Vendor Advisory
http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html
Vendor Advisory
http://osvdb.org/33899
http://secunia.com/advisories/24359
Vendor Advisory
http://www.kb.cert.org/vuls/id/410993
US Government Resource
http://www.securityfocus.com/bid/22827
http://www.securitytracker.com/id?1017725
http://www.us-cert.gov/cas/techalerts/TA07-065A.html
US Government Resource
http://www.vupen.com/english/advisories/2007/0825
https://exchange.xforce.ibmcloud.com/vulnerabilities/32823
http://docs.info.apple.com/article.html?artnum=305149
Patch
Vendor Advisory
http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html
Vendor Advisory
http://osvdb.org/33899
http://secunia.com/advisories/24359
Vendor Advisory
http://www.kb.cert.org/vuls/id/410993
US Government Resource
http://www.securityfocus.com/bid/22827
http://www.securitytracker.com/id?1017725
http://www.us-cert.gov/cas/techalerts/TA07-065A.html
US Government Resource
http://www.vupen.com/english/advisories/2007/0825
https://exchange.xforce.ibmcloud.com/vulnerabilities/32823

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.17309

Средний

5.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-mrc4-7448-mf6q

github

почти 4 года назад