CVE-2007-2392

CRÍTICO 9.3CVE-2007-2392 · Published 15/07/2007 · updated 16/06/2026

En resumen

CVE-2007-2392 es una vulnerabilidad CRÍTICO (CVSS 9.3) que afecta a quicktime (apple).
Probabilidad de explotación en los próximos 30 días (EPSS): 6.1%, mayor que el 93.4% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
quicktime apple	`= 7.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.1= 7.1.1= 7.1.2= 7.1.3= 7.1.4= 7.1.5`	No fix yet

Description

Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via a crafted movie file that triggers memory corruption.

References

docs.info.apple.com/article.html · Patch
lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html · Patch
osvdb.org/36136
secunia.com/advisories/26034 · Patch
kb.cert.org/vuls/id/582681 · US Government Resource
securityfocus.com/bid/24873
securitytracker.com/id
us-cert.gov/cas/techalerts/TA07-193A.html · US Government Resource
vupen.com/english/advisories/2007/2510
exchange.xforce.ibmcloud.com/vulnerabilities/35353

Más vulnerabilidades de quicktime

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

quicktime

apple

= 7.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.1= 7.1.1= 7.1.2= 7.1.3= 7.1.4= 7.1.5

No fix yet

Más vulnerabilidades de quicktime

Ver todo →