NVD

Id
56796  
Name
CVE-2007-4676  
Description
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-11-07  
Modified Date
2011-03-07  
Seq
2007-4676  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
289613 56796 CVE-2007-4676 http://docs.info.apple.com/article.html?artnum=306896  View
289614 56796 CVE-2007-4676 APPLE-SA-2007-11-05  View
289615 56796 CVE-2007-4676 3351  View
289616 56796 CVE-2007-4676 VU#690515  View
289617 56796 CVE-2007-4676 20071105 ZDI-07-066: Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability  View
289618 56796 CVE-2007-4676 20071105 ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability  View
289619 56796 CVE-2007-4676 26345  View
289620 56796 CVE-2007-4676 1018894  View
289621 56796 CVE-2007-4676 TA07-310A  View
289622 56796 CVE-2007-4676 ADV-2007-3723  View
289623 56796 CVE-2007-4676 http://www.zerodayinitiative.com/advisories/ZDI-07-066.html  View
289624 56796 CVE-2007-4676 http://www.zerodayinitiative.com/advisories/ZDI-07-067.html  View
289625 56796 CVE-2007-4676 quicktime-packbitsrgn-bo(38280)  View
289626 56796 CVE-2007-4676 quicktime-poly-type-bo(38281)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52237 JVNDB-2007-000927 Apple QuickTime の PICT イメージの取り扱いに関するヒープベースのバッファオーバーフローの脆弱性 Apple QuickTime には PICT イメージの Poly type オペコードおよび PackBitsRgn field オペコードの取り扱いに不備があり、ヒープベースのバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-4676 28031 CVE-2007-4676 56796 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000927.html 2007-11-05 2007-11-28 View