CVE-2007-2394

high · 9.3

Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.

9.3

CVSS

12.1%

EPSS (exploit prob.)

96th

EPSS percentile

2007-07-15

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
apple	mac_os_x	10.3.9
apple	mac_os_x	10.4.9
apple	quicktime	all versions
apple	quicktime	7.0
apple	quicktime	7.0.1
apple	quicktime	7.0.2
apple	quicktime	7.0.3
apple	quicktime	7.0.4
apple	quicktime	7.1
apple	quicktime	7.1.1
apple	quicktime	7.1.2
apple	quicktime	7.1.3
apple	quicktime	7.1.4
apple	quicktime	7.1.5

Check a specific version with /api/v1/cve/match.

References

http://docs.info.apple.com/article.html?artnum=305947
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=556
http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
http://osvdb.org/36134
http://secunia.com/advisories/26034
http://www.securityfocus.com/archive/1/473882/100/100/threaded
http://www.securityfocus.com/bid/24873
http://www.securitytracker.com/id?1018373
http://www.us-cert.gov/cas/techalerts/TA07-193A.html
http://www.vupen.com/english/advisories/2007/2510
https://exchange.xforce.ibmcloud.com/vulnerabilities/35357
http://docs.info.apple.com/article.html?artnum=305947
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=556
http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
http://osvdb.org/36134
http://secunia.com/advisories/26034
http://www.securityfocus.com/archive/1/473882/100/100/threaded
http://www.securityfocus.com/bid/24873
http://www.securitytracker.com/id?1018373
http://www.us-cert.gov/cas/techalerts/TA07-193A.html
http://www.vupen.com/english/advisories/2007/2510
https://exchange.xforce.ibmcloud.com/vulnerabilities/35357

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-2394