CVE

Id
24075  
CVE No.
CVE-2007-0718  
Status
Candidate  
Description
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a QTIF file with a Video Sample Description containing a Color table ID of 0, which triggers memory corruption when QuickTime assumes that a color table exists.  
Phase
Assigned (20070205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
234789 24075 CVE-2007-0718 IDEFENSE:20070305 Apple QuickTime Color Table ID Heap Corruption Vulnerability  View
234790 24075 CVE-2007-0718 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=486  View
234791 24075 CVE-2007-0718 BUGTRAQ:20070306 [Reversemode Advisory] Apple Quicktime Color ID remote heap corruption  View
234792 24075 CVE-2007-0718 URL:http://www.securityfocus.com/archive/1/archive/1/462012/100/0/threaded  View
234793 24075 CVE-2007-0718 APPLE:APPLE-SA-2007-03-05  View
234794 24075 CVE-2007-0718 URL:http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html  View
234795 24075 CVE-2007-0718 CONFIRM:http://docs.info.apple.com/article.html?artnum=305149  View
234796 24075 CVE-2007-0718 CERT:TA07-065A  View
234797 24075 CVE-2007-0718 URL:http://www.us-cert.gov/cas/techalerts/TA07-065A.html  View
234798 24075 CVE-2007-0718 CERT-VN:VU#313225  View
234799 24075 CVE-2007-0718 URL:http://www.kb.cert.org/vuls/id/313225  View
234800 24075 CVE-2007-0718 BID:22827  View
234801 24075 CVE-2007-0718 URL:http://www.securityfocus.com/bid/22827  View
234802 24075 CVE-2007-0718 BID:22839  View
234803 24075 CVE-2007-0718 URL:http://www.securityfocus.com/bid/22839  View
234804 24075 CVE-2007-0718 VUPEN:ADV-2007-0825  View
234805 24075 CVE-2007-0718 URL:http://www.vupen.com/english/advisories/2007/0825  View
234806 24075 CVE-2007-0718 SECTRACK:1017725  View
234807 24075 CVE-2007-0718 URL:http://www.securitytracker.com/id?1017725  View
234808 24075 CVE-2007-0718 SECUNIA:24359  View
234809 24075 CVE-2007-0718 URL:http://secunia.com/advisories/24359  View
234810 24075 CVE-2007-0718 XF:quicktime-qtif-file-bo(32826)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51604 JVNDB-2007-000266 CUPS の SSL ネゴシエーション処理の不備によるサービス運用妨害 (DoS) の脆弱性 CUPS には SSL ネゴシエーション処理に不備が存在するため、特定のリクエストを処理した際に、他の受け入れたリクエストを受け付けず、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-0720 24075 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000266.html  View