CVE-2007-6166
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
72Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 42%
da publicação à armano mesmo dia
Publicada no NVD29 de nov.
1ª PoC24 de nov.
metasploit23 de nov.
VulnCheck+884d
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 8✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4657exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4651exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4664cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4648exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16873exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/11027cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/6013exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16424⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://docs.info.apple.com/article.html?artnum=307176http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.htmlhttp://secunia.com/advisories/27755http://secunia.com/advisories/29182http://security.gentoo.org/glsa/glsa-200803-08.xmlhttp://securityreason.com/securityalert/3410https://exchange.xforce.ibmcloud.com/vulnerabilities/38604https://www.exploit-db.com/exploits/4648https://www.exploit-db.com/exploits/6013http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_controlhttp://www.kb.cert.org/vuls/id/659761http://www.securityfocus.com/bid/26549