Lucene search

MitreCVE-2007-2395

HistoryNov 07, 2007 - 11:46 p.m.

CVE-2007-2395

2007-11-0723:46:00

mitre

web.nvd.nist.gov

apple

quicktime

vulnerability

code execution

memory corruption

cve-2007-2395

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.087

Percentile

94.6%

JSON

Unspecified vulnerability in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a crafted image description atom in a movie file, related to “memory corruption.”

Affected configurations

Nvd

Node

applequicktimeRange≤7.2

VendorProductVersionCPE
applequicktime*cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	quicktime	*	cpe:2.3:a:apple:quicktime::::::::

References

docs.info.apple.com/article.html?artnum=306896

lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html

osvdb.org/38550

secunia.com/advisories/27523

www.kb.cert.org/vuls/id/797875

www.securityfocus.com/bid/26340

www.securitytracker.com/id?1018894

www.us-cert.gov/cas/techalerts/TA07-310A.html

www.vupen.com/english/advisories/2007/3723

exchange.xforce.ibmcloud.com/vulnerabilities/38266

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.087

Percentile

94.6%

JSON

Related for CVE-2007-2395