CVE-2007-6166

Apple QuickTime 7.2/7.3 - RTSP Response Remote Overwrite (SEH)

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.

Un desbordamiento de búfer en la región stack de la memoria en Apple QuickTime anterior a la versión 7.3.1, como es usado en QuickTime Player en Windows XP y Safari en Mac OS X, permite a servidores remotos de Real Time Streaming Protocol (RTSP) ejecutar código arbitrario por medio de una respuesta RTSP con un encabezado Content-Type largo.

*Credits: N/A

CVSS Scores

NISTv2 9.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-11-24 First Exploit
2007-11-28 CVE Reserved
2007-11-29 CVE Published
2024-08-07 CVE Updated
2024-11-09 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (22)

URL	Tag	Source
http://docs.info.apple.com/article.html?artnum=307176	X_refsource_misc
http://securityreason.com/securityalert/3410	Third Party Advisory
http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control	X_refsource_misc
http://www.kb.cert.org/vuls/id/659761	Third Party Advisory
http://www.securityfocus.com/bid/26549	Vdb Entry
http://www.securityfocus.com/bid/26560	Vdb Entry
http://www.securitytracker.com/id?1018989	Vdb Entry
http://www.us-cert.gov/cas/techalerts/TA07-334A.html	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38604	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/4648	2024-08-07
https://www.exploit-db.com/exploits/16873	2010-10-09
https://www.exploit-db.com/exploits/6013	2024-08-07
https://www.exploit-db.com/exploits/4657	2007-11-26
https://www.exploit-db.com/exploits/4664	2007-11-27
https://www.exploit-db.com/exploits/4651	2007-11-24
https://www.exploit-db.com/exploits/11027	2010-01-06
https://www.exploit-db.com/exploits/16424	2010-05-09

URL	Date	SRC

URL	Date	SRC
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html	2018-10-30
http://secunia.com/advisories/27755	2018-10-30
http://secunia.com/advisories/29182	2018-10-30
http://security.gentoo.org/glsa/glsa-200803-08.xml	2018-10-30
http://www.vupen.com/english/advisories/2007/3984	2018-10-30

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	<= 7.3 Search vendor "Apple" for product "Quicktime" and version " <= 7.3"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	<= 7.3 Search vendor "Apple" for product "Quicktime" and version " <= 7.3"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	-	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	-	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	3.0 Search vendor "Apple" for product "Quicktime" and version "3.0"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	3.0 Search vendor "Apple" for product "Quicktime" and version "3.0"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	4.1.2 Search vendor "Apple" for product "Quicktime" and version "4.1.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	4.1.2 Search vendor "Apple" for product "Quicktime" and version "4.1.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	5.0 Search vendor "Apple" for product "Quicktime" and version "5.0"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	5.0 Search vendor "Apple" for product "Quicktime" and version "5.0"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	5.0.1 Search vendor "Apple" for product "Quicktime" and version "5.0.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	5.0.1 Search vendor "Apple" for product "Quicktime" and version "5.0.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	5.0.2 Search vendor "Apple" for product "Quicktime" and version "5.0.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	5.0.2 Search vendor "Apple" for product "Quicktime" and version "5.0.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	6.0 Search vendor "Apple" for product "Quicktime" and version "6.0"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	6.0 Search vendor "Apple" for product "Quicktime" and version "6.0"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	6.1 Search vendor "Apple" for product "Quicktime" and version "6.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	6.1 Search vendor "Apple" for product "Quicktime" and version "6.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	6.5 Search vendor "Apple" for product "Quicktime" and version "6.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	6.5 Search vendor "Apple" for product "Quicktime" and version "6.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	6.5.1 Search vendor "Apple" for product "Quicktime" and version "6.5.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	6.5.1 Search vendor "Apple" for product "Quicktime" and version "6.5.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	6.5.2 Search vendor "Apple" for product "Quicktime" and version "6.5.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	6.5.2 Search vendor "Apple" for product "Quicktime" and version "6.5.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.0 Search vendor "Apple" for product "Quicktime" and version "7.0"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.0 Search vendor "Apple" for product "Quicktime" and version "7.0"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.0.1 Search vendor "Apple" for product "Quicktime" and version "7.0.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.0.1 Search vendor "Apple" for product "Quicktime" and version "7.0.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.0.2 Search vendor "Apple" for product "Quicktime" and version "7.0.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.0.2 Search vendor "Apple" for product "Quicktime" and version "7.0.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.0.3 Search vendor "Apple" for product "Quicktime" and version "7.0.3"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.0.3 Search vendor "Apple" for product "Quicktime" and version "7.0.3"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.0.4 Search vendor "Apple" for product "Quicktime" and version "7.0.4"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.0.4 Search vendor "Apple" for product "Quicktime" and version "7.0.4"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1 Search vendor "Apple" for product "Quicktime" and version "7.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1 Search vendor "Apple" for product "Quicktime" and version "7.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.1 Search vendor "Apple" for product "Quicktime" and version "7.1.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.1 Search vendor "Apple" for product "Quicktime" and version "7.1.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.2 Search vendor "Apple" for product "Quicktime" and version "7.1.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.2 Search vendor "Apple" for product "Quicktime" and version "7.1.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.3 Search vendor "Apple" for product "Quicktime" and version "7.1.3"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.3 Search vendor "Apple" for product "Quicktime" and version "7.1.3"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.4 Search vendor "Apple" for product "Quicktime" and version "7.1.4"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.4 Search vendor "Apple" for product "Quicktime" and version "7.1.4"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.5 Search vendor "Apple" for product "Quicktime" and version "7.1.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.5 Search vendor "Apple" for product "Quicktime" and version "7.1.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.6 Search vendor "Apple" for product "Quicktime" and version "7.1.6"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.1.6 Search vendor "Apple" for product "Quicktime" and version "7.1.6"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.2 Search vendor "Apple" for product "Quicktime" and version "7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Vista Search vendor "Microsoft" for product "Windows Vista"	*	-	Safe
Apple Search vendor "Apple"	Quicktime Search vendor "Apple" for product "Quicktime"	7.2 Search vendor "Apple" for product "Quicktime" and version "7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Xp Search vendor "Microsoft" for product "Windows Xp"	*	sp2	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.3.9 Search vendor "Apple" for product "Mac Os X" and version "10.3.9"	-	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.4.9 Search vendor "Apple" for product "Mac Os X" and version "10.4.9"	-	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.5 Search vendor "Apple" for product "Mac Os X" and version "10.5"	-	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.5.0 Search vendor "Apple" for product "Mac Os X" and version "10.5.0"	-	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.5.1 Search vendor "Apple" for product "Mac Os X" and version "10.5.1"	-	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.5.2 Search vendor "Apple" for product "Mac Os X" and version "10.5.2"	-	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.5.3 Search vendor "Apple" for product "Mac Os X" and version "10.5.3"	-	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.5.4 Search vendor "Apple" for product "Mac Os X" and version "10.5.4"	-	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.5.5 Search vendor "Apple" for product "Mac Os X" and version "10.5.5"	-	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.5.6 Search vendor "Apple" for product "Mac Os X" and version "10.5.6"	-	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.5.7 Search vendor "Apple" for product "Mac Os X" and version "10.5.7"	-	Safe
Apple Search vendor "Apple"	Safari Search vendor "Apple" for product "Safari"	*	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	10.5.8 Search vendor "Apple" for product "Mac Os X" and version "10.5.8"	-	Safe