critical9.3Public exploit code
CVE-2007-6166
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streamin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple QuickTime (Mac OSX) - RTSP Content-Type Overflow (Metasploit)2010-10-09 · remote · osx · Verified
- Apple QuickTime 7.3 - RTSP Response Header Buffer Overflow (Metasploit)2010-05-09 · remote · windows · Verified
- Apple QuickTime 7.2/7.3 - RTSP Buffer Overflow2010-01-06 · remote · windows · Verified
- Apple Safari / QuickTime 7.3 - RTSP Content-Type Remote Buffer Overflow2008-07-06 · remote · osx · Verified
- Apple QuickTime 7.2/7.3 - RSTP Response Universal2007-11-27 · remote · windows · Verified
- Apple QuickTime 7.2/7.3 (Internet Explorer 7 / Firefox / Opera) - RTSP Response Universal2007-11-26 · remote · windows · Verified
- Apple QuickTime 7.2/7.3 (Windows Vista/XP) - RSTP Response Code Execution2007-11-24 · remote · windows · Verified
- Apple QuickTime 7.2/7.3 - RTSP Response Remote Overwrite (SEH)2007-11-23 · dos · multiple · Verified
Impact
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Quicktime | through 7.3 All versions Versions 3.0, 4.1.2, 5.0, 5.0.1 |
| Apple | Safari | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://docs.info.apple.com/article.html?artnum=307176
- http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html
- http://secunia.com/advisories/27755
- http://secunia.com/advisories/29182
- http://security.gentoo.org/glsa/glsa-200803-08.xml
- http://securityreason.com/securityalert/3410
- http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control
- http://www.kb.cert.org/vuls/id/659761
- http://www.securityfocus.com/bid/26549
- http://www.securityfocus.com/bid/26560
- http://www.securitytracker.com/id?1018989
- http://www.us-cert.gov/cas/techalerts/TA07-334A.html
- http://www.vupen.com/english/advisories/2007/3984
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38604
- https://www.exploit-db.com/exploits/4648
- https://www.exploit-db.com/exploits/6013
- http://docs.info.apple.com/article.html?artnum=307176
- http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html
- http://secunia.com/advisories/27755
- http://secunia.com/advisories/29182
- http://security.gentoo.org/glsa/glsa-200803-08.xml
- http://securityreason.com/securityalert/3410
- http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control
- http://www.kb.cert.org/vuls/id/659761
- http://www.securityfocus.com/bid/26549