CVE-2007-6166 | BDVDB-2026-28003 Detail
Description#
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/bid/26549
- http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control
- http://securityreason.com/securityalert/3410
- https://www.exploit-db.com/exploits/4648
- http://docs.info.apple.com/article.html?artnum=307176
- http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html
- http://security.gentoo.org/glsa/glsa-200803-08.xml
- http://www.securityfocus.com/bid/26560
- http://www.us-cert.gov/cas/techalerts/TA07-334A.html
- http://www.kb.cert.org/vuls/id/659761
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38604
- https://www.exploit-db.com/exploits/6013
- http://www.vupen.com/english/advisories/2007/3984
- http://secunia.com/advisories/27755
- http://secunia.com/advisories/29182
Show all 16
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.