← back
CVE-2007-2394

CVE-2007-2394

EPSS 12.1%
Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/4359unverifiedexploitdbwww.exploit-db.com/exploits/30292unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://docs.info.apple.com/article.html?artnum=305947http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=556http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.htmlhttp://osvdb.org/36134http://secunia.com/advisories/26034https://exchange.xforce.ibmcloud.com/vulnerabilities/35357http://www.securityfocus.com/archive/1/473882/100/100/threadedhttp://www.securityfocus.com/bid/24873http://www.securitytracker.com/id?1018373http://www.us-cert.gov/cas/techalerts/TA07-193A.htmlhttp://www.vupen.com/english/advisories/2007/2510