PT-2007-7127 · Apple · Apple Quicktime

Published 2007-12-04 · Updated 2017-08-08 · CVE-2007-6238

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple QuickTime version 7.2

Description The issue allows remote attackers to execute arbitrary code via unknown attack vectors. It is likely a different issue than the one previously identified, although the exact nature and vectors of the attack are not specified due to the vague advisory from the vulnerability information sales organization.

Recommendations For Apple QuickTime version 7.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-6238

Affected Products

Apple Quicktime

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-6238 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38852 · Note
• http://wabisabilabi.blogspot.com/2007/11/quicktime-zeroday-vulnerability-still.html · Note
• http://securitytracker.com/id?1019039 · Note
• http://xforce.iss.net/xforce/xfdb/38852 · Note
• http://wslabi.com/wabisabilabi/showBidInfo.do?code=ZD-00000185 · Note
• http://securityfocus.com/bid/26682 · Note