PT-2007-5835

CVE-2007-4677

Publicado

2007-11-07

Atualizado

2018-10-26

Descrição por

CVSS 2.0

9.3

Alta

MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Apple QuickTime versions prior to 7.3

Description: The issue is related to a heap-based buffer overflow that occurs when parsing the color table atom (CTAB) in a movie file. This happens due to an invalid color table size, specifically related to the CTAB RGB values, allowing remote attackers to execute arbitrary code.

Recommendations: For versions prior to 7.3, update to version 7.3 or later to resolve the issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Mario Ballano

Ruben Santamarta

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Identificadores relacionados