CVE-2007-2394

Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

12.14% chance of exploitation in the next 30 days, 96th percentile

Published

2007-07-15

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/30292
• https://www.exploit-db.com/exploits/4359

Security advisories

• http://secunia.com/advisories/26034
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=556
• http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
• http://www.securityfocus.com/bid/24873

References

• CVE Record
• NVD entry