| Vulnerability Name: | CVE-2007-0015 (CCN-31203) | ||||||||
| Assigned: | 2007-01-01 | ||||||||
| Published: | 2007-01-01 | ||||||||
| Updated: | 2017-10-19 | ||||||||
| Summary: | Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI. | ||||||||
| CVSS v3 Severity: | 9.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P) 5.4 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:F/RL:OF/RC:UR)
6.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:UR)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2007-0015 Source: CCN Type: Apple Security Update 2007-001 About Security Update 2007-001 Source: CONFIRM Type: UNKNOWN http://docs.info.apple.com/article.html?artnum=304989 Source: MISC Type: UNKNOWN http://isc.sans.org/diary.html?storyid=2094 Source: MISC Type: UNKNOWN http://landonf.bikemonkey.org/code/macosx/MOAB_Day_1.20070102060815.15950.zadder.local.html Source: APPLE Type: UNKNOWN APPLE-SA-2007-01-23 Source: CCN Type: MOAB-01-01-2007 Apple Quicktime rtsp URL Handler Stack-based Buffer Overflow Source: MISC Type: Exploit http://projects.info-pull.com/moab/MOAB-01-01-2007.html Source: CCN Type: SA23540 Apple Quicktime RTSP URL Handling Buffer Overflow Vulnerability Source: SECUNIA Type: Patch, Vendor Advisory 23540 Source: MISC Type: UNKNOWN http://secunia.com/blog/7/ Source: CCN Type: SECTRACK ID: 1017461 Apple QuickTime rtsp:// URL Handler Stack Overflow Lets Remote Users Execute Arbitrary Code Source: SECTRACK Type: Exploit 1017461 Source: CCN Type: Apple QuickTime Web site Apple - Quicktime Source: CCN Type: US-CERT VU#442497 Apple QuickTime RTSP buffer overflow Source: CERT-VN Type: Patch, US Government Resource VU#442497 Source: OSVDB Type: UNKNOWN 31023 Source: CCN Type: OSVDB ID: 31023 Apple QuickTime RTSP URL Handling Overflow Source: BID Type: Exploit 21829 Source: CCN Type: BID-21829 Apple QuickTime RTSP URI Remote Buffer Overflow Vulnerability Source: CERT Type: US Government Resource TA07-005A Source: VUPEN Type: UNKNOWN ADV-2007-0001 Source: XF Type: UNKNOWN quicktime-rtsp-url-bo(31203) Source: XF Type: UNKNOWN quicktime-rtsp-url-bo(31203) Source: EXPLOIT-DB Type: UNKNOWN 3064 Source: CCN Type: Rapid7 Vulnerability and Exploit Database [01-01-2007] Apple QuickTime 7.1.3 RTSP URI Buffer Overflow | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||