← volver
CVE-2007-4676

CVE-2007-4676

15Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 47%
probabilidad de explotación
47%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
Productos afectados
n/a · n/a
Referencias
http://docs.info.apple.com/article.html?artnum=306896http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.htmlhttp://osvdb.org/38546http://secunia.com/advisories/27523http://securityreason.com/securityalert/3351https://exchange.xforce.ibmcloud.com/vulnerabilities/38280https://exchange.xforce.ibmcloud.com/vulnerabilities/38281http://www.kb.cert.org/vuls/id/690515http://www.securityfocus.com/archive/1/483311/100/0/threadedhttp://www.securityfocus.com/archive/1/483313/100/0/threadedhttp://www.securityfocus.com/bid/26345http://www.securitytracker.com/id?1018894