CVE-2007-6166
72Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 42%
da publicação à arma0 dias
Publicada no NVD29 de nov.
1ª PoC24 de nov.
metasploit23 de nov.
VulnCheck+884d
probabilidade de exploração
42%top 1% das CVEs
exploração observada
simVulnCheck
8 exploit(s) público(s)
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 8✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4664cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4648exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16873cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/6013exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4657exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4651exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/11027exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16424⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://docs.info.apple.com/article.html?artnum=307176http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.htmlhttp://secunia.com/advisories/27755http://secunia.com/advisories/29182http://security.gentoo.org/glsa/glsa-200803-08.xmlhttp://securityreason.com/securityalert/3410https://exchange.xforce.ibmcloud.com/vulnerabilities/38604https://www.exploit-db.com/exploits/4648https://www.exploit-db.com/exploits/6013http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_controlhttp://www.kb.cert.org/vuls/id/659761http://www.securityfocus.com/bid/26549