CVE-2007-4676

CRITICAL 9.3CVE-2007-4676 · Published 07/11/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.

References

docs.info.apple.com/article.html · Vendor Advisory
lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html · Vendor Advisory
osvdb.org/38546 · Broken Link
secunia.com/advisories/27523 · Third Party Advisory
securityreason.com/securityalert/3351 · Third Party Advisory
kb.cert.org/vuls/id/690515 · Third Party Advisory
securityfocus.com/archive/1/483311/100/0/threaded · Third Party Advisory
securityfocus.com/archive/1/483313/100/0/threaded · Third Party Advisory
securityfocus.com/bid/26345 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
us-cert.gov/cas/techalerts/TA07-310A.html · Third Party Advisory
vupen.com/english/advisories/2007/3723 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-07-066.html · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-07-067.html · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/38280 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/38281 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free