CVE-2007-4676

Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.

Link	Resource
http://www.zerodayinitiative.com/advisories/ZDI-07-066.html	Third Party Advisory VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-07-067.html	Third Party Advisory VDB Entry
http://docs.info.apple.com/article.html?artnum=306896	Vendor Advisory
http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html	Vendor Advisory
http://www.securitytracker.com/id?1018894	Third Party Advisory VDB Entry
http://secunia.com/advisories/27523	Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA07-310A.html	Third Party Advisory US Government Resource
http://www.kb.cert.org/vuls/id/690515	Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/26345	Third Party Advisory VDB Entry
http://securityreason.com/securityalert/3351	Third Party Advisory
http://osvdb.org/38546	Broken Link
http://www.vupen.com/english/advisories/2007/3723	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38281	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/38280	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/483313/100/0/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/483311/100/0/threaded	Third Party Advisory VDB Entry

Configuration 1

---

Published : 2007-11-07 11:46

Updated : 2018-10-26 02:09

---

NVD link : CVE-2007-4676

Mitre link : CVE-2007-4676

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer