CVE-2007-0712

Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MIDI file.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:a:apple:quicktime:*:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*
OR cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*

History

21 Nov 2024, 00:26

Type Values Removed Values Added
References () http://docs.info.apple.com/article.html?artnum=305149 - () http://docs.info.apple.com/article.html?artnum=305149 -
References () http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - () http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html -
References () http://osvdb.org/33904 - () http://osvdb.org/33904 -
References () http://secunia.com/advisories/24359 - () http://secunia.com/advisories/24359 -
References () http://www.kb.cert.org/vuls/id/822481 - US Government Resource () http://www.kb.cert.org/vuls/id/822481 - US Government Resource
References () http://www.securityfocus.com/bid/22827 - () http://www.securityfocus.com/bid/22827 -
References () http://www.securitytracker.com/id?1017725 - () http://www.securitytracker.com/id?1017725 -
References () http://www.us-cert.gov/cas/techalerts/TA07-065A.html - US Government Resource () http://www.us-cert.gov/cas/techalerts/TA07-065A.html - US Government Resource
References () http://www.vupen.com/english/advisories/2007/0825 - () http://www.vupen.com/english/advisories/2007/0825 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/32816 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/32816 -

Information

Published : 2007-03-05 22:19

Updated : 2024-11-21 00:26


NVD link : CVE-2007-0712

Mitre link : CVE-2007-0712

CVE.ORG link : CVE-2007-0712


JSON object : View

Products Affected

apple

  • mac_os_x
  • quicktime

microsoft

  • windows
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer