CVE-2007-2394 : Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 all

Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.

Published 2007-07-15 21:30:00

Updated 2018-10-30 16:25:18

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2007-2394

Apple » Quicktime » Version: 7.0
cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9
Apple » Quicktime » Version: 7.0.1
cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9
Apple » Quicktime » Version: 7.0.2
cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9
Apple » Quicktime » Version: 7.0.3
cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9
Apple » Quicktime » Version: 7.0.4
cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9
Apple » Quicktime » Version: 7.1.1
cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9
Apple » Quicktime » Version: 7.1.2
cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9
Apple » Quicktime » Version: 7.1
cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9
Apple » Quicktime » Version: 7.1.3
cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9
Apple » Quicktime » Version: 7.1.4
cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9
Apple » Quicktime » Version: 7.1.5
cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9
Apple » Quicktime » Version: N/A
cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.3.9
When used together with: Apple » Mac Os X » Version: 10.4.9

Exploit prediction scoring system (EPSS) score for CVE-2007-2394

EPSS FAQ

55.21%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-2394

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2007-2394

Jump to

Vulnerability Details : CVE-2007-2394

Products affected by CVE-2007-2394

Exploit prediction scoring system (EPSS) score for CVE-2007-2394

CVSS scores for CVE-2007-2394

References for CVE-2007-2394