Lucene search

MitreCVE-2007-4707

HistoryDec 15, 2007 - 1:46 a.m.

CVE-2007-4707

2007-12-1501:46:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-4707

apple

quicktime

flash

media handler

vulnerability

remote code execution

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.028

Percentile

90.9%

JSON

Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts via a crafted QuickTime movie.

Affected configurations

Nvd

Node

applequicktimeRange≤7.3

VendorProductVersionCPE
applequicktime*cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	quicktime	*	cpe:2.3:a:apple:quicktime::::::::

References

docs.info.apple.com/article.html?artnum=307176

lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html

secunia.com/advisories/28092

www.securityfocus.com/bid/26866

www.securitytracker.com/id?1019099

www.vupen.com/english/advisories/2007/4217

exchange.xforce.ibmcloud.com/vulnerabilities/39030

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.028

Percentile

90.9%

JSON

Related for CVE-2007-4707