← voltar
CVE-2007-4676

CVE-2007-4676

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 47%
probabilidade de exploração
47%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
Produtos afetados
n/a · n/a
Referências
http://docs.info.apple.com/article.html?artnum=306896http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.htmlhttp://osvdb.org/38546http://secunia.com/advisories/27523http://securityreason.com/securityalert/3351https://exchange.xforce.ibmcloud.com/vulnerabilities/38280https://exchange.xforce.ibmcloud.com/vulnerabilities/38281http://www.kb.cert.org/vuls/id/690515http://www.securityfocus.com/archive/1/483311/100/0/threadedhttp://www.securityfocus.com/archive/1/483313/100/0/threadedhttp://www.securityfocus.com/bid/26345http://www.securitytracker.com/id?1018894