Vulnerability Details : CVE-2007-6166

Products affected by CVE-2007-6166

Metasploit modules for CVE-2007-6166

• MacOS X QuickTime RTSP Content-Type Overflow

  Disclosure Date: 2007-11-23

  First seen: 2020-04-26

  exploit/osx/rtsp/quicktime_rtsp_content_type

  This module exploits a stack-based buffer overflow in Apple QuickTime before version 7.3.1. By sending an overly long RTSP response to a client, an attacker may be able to execute arbitrary code. Authors: - unknown

  More information

• Apple QuickTime 7.3 RTSP Response Header Buffer Overflow

  Disclosure Date: 2007-11-23

  First seen: 2020-04-26

  exploit/windows/misc/apple_quicktime_rtsp_response

  This module exploits a stack buffer overflow in Apple QuickTime 7.3. By sending an overly long RTSP response to a client, an attacker may be able to execute arbitrary code. Authors: - MC <mc@metasploit.com>

  More information

CVSS scores for CVE-2007-6166

CWE ids for CVE-2007-6166

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
  Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-6166