PT-2007-7127 · Apple · Apple Quicktime

Publicado 2007-12-04 · Atualizado 2017-08-08 · CVE-2007-6238

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple QuickTime version 7.2

Description The issue allows remote attackers to execute arbitrary code via unknown attack vectors. It is likely a different issue than the one previously identified, although the exact nature and vectors of the attack are not specified due to the vague advisory from the vulnerability information sales organization.

Recommendations For Apple QuickTime version 7.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-6238

Produtos afetados

Apple Quicktime

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/38852 · Nota
• http://wabisabilabi.blogspot.com/2007/11/quicktime-zeroday-vulnerability-still.html · Nota
• http://securitytracker.com/id?1019039 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6238 · Nota de Segurança
• http://xforce.iss.net/xforce/xfdb/38852 · Nota
• http://wslabi.com/wabisabilabi/showBidInfo.do?code=ZD-00000185 · Nota
• http://securityfocus.com/bid/26682 · Nota