PT-2007-5835

CVE-2007-4677

Published

2007-11-07

Updated

2018-10-26

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Apple QuickTime versions prior to 7.3

Description: The issue is related to a heap-based buffer overflow that occurs when parsing the color table atom (CTAB) in a movie file. This happens due to an invalid color table size, specifically related to the CTAB RGB values, allowing remote attackers to execute arbitrary code.

Recommendations: For versions prior to 7.3, update to version 7.3 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Mario Ballano

Ruben Santamarta

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers