NVD

Id
54561  
Name
CVE-2007-2394  
Description
Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-15  
Modified Date
2013-07-06  
Seq
2007-2394  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276677 54561 CVE-2007-2394 http://docs.info.apple.com/article.html?artnum=305947  View
276678 54561 CVE-2007-2394 20070711 Apple QuickTime SMIL File Processing Integer Overflow Vulnerability  View
276679 54561 CVE-2007-2394 APPLE-SA-2007-07-11  View
276680 54561 CVE-2007-2394 20070717 Re: iDefense Security Advisory 07.11.07: Apple QuickTime SMIL File Processing Integer Overflow Vulnerability  View
276681 54561 CVE-2007-2394 24873  View
276682 54561 CVE-2007-2394 1018373  View
276683 54561 CVE-2007-2394 TA07-193A  View
276684 54561 CVE-2007-2394 ADV-2007-2510  View
276685 54561 CVE-2007-2394 quicktime-smil-overflow(35357)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51856 JVNDB-2007-000519 Apple Quicktime の SMIL ファイルの処理における整数オーバーフローの脆弱性 Apple Quicktime には、メモリ配置の演算処理に不備が存在するために、不正な title フィールド及び author フィールドの SMIL ファイルを処理した際に、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-2394 25749 CVE-2007-2394 54561 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000519.html 2007-07-06 2007-07-24 View