NVD

Id
56795  
Name
CVE-2007-4675  
Description
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-11-07  
Modified Date
2011-10-17  
Seq
2007-4675  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
289602 56795 CVE-2007-4675 http://blog.48bits.com/?p=176  View
289603 56795 CVE-2007-4675 http://docs.info.apple.com/article.html?artnum=306896  View
289604 56795 CVE-2007-4675 20071105 Apple QuickTime Panorama Sample Atom Heap Buffer Overflow Vulnerability  View
289605 56795 CVE-2007-4675 APPLE-SA-2007-11-05  View
289606 56795 CVE-2007-4675 http://www.48bits.com/advisories/qt_pdat_heapbof.pdf  View
289607 56795 CVE-2007-4675 20071110 [48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow  View
289608 56795 CVE-2007-4675 26342  View
289609 56795 CVE-2007-4675 1018894  View
289610 56795 CVE-2007-4675 TA07-310A  View
289611 56795 CVE-2007-4675 ADV-2007-3723  View
289612 56795 CVE-2007-4675 quicktime-qtvr-bo(38282)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52236 JVNDB-2007-000926 Apple QuickTime の QTVR ムービーファイルの取り扱いに関するヒープベースのバッファオーバーフローの脆弱性 Apple QuickTime には QuickTime VR 拡張において QuickTime Virtual Reality (QTVR) ムービーファイルのパノラマサンプルアトムの処理に不備があり、過度に大きなパノラマサンプルアトムを処理した際に、ヒープベースのバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-4675 28030 CVE-2007-4675 56795 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000926.html 2007-11-07 2007-11-28 View