CVE-2007-4676

緊急 9.3CVE-2007-4676 · 07/11/2007 公開 · 16/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
—	この脆弱性の影響を受ける製品バージョンはまだ掲載されていません。

概要

Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.

参考情報

docs.info.apple.com/article.html · Vendor Advisory
lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html · Vendor Advisory
osvdb.org/38546 · Broken Link
secunia.com/advisories/27523 · Third Party Advisory
securityreason.com/securityalert/3351 · Third Party Advisory
kb.cert.org/vuls/id/690515 · Third Party Advisory
securityfocus.com/archive/1/483311/100/0/threaded · Third Party Advisory
securityfocus.com/archive/1/483313/100/0/threaded · Third Party Advisory
securityfocus.com/bid/26345 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
us-cert.gov/cas/techalerts/TA07-310A.html · Third Party Advisory
vupen.com/english/advisories/2007/3723 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-07-066.html · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-07-067.html · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/38280 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/38281 · Third Party Advisory

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン