https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 03:34:45 +0000 https://vulnerability.circl.lu/vuln/CERTA-2007-AVI-477 CERTA-2007-AVI-477 https://vulnerability.circl.lu/vuln/CERTA-2007-AVI-477 https://vulnerability.circl.lu/vuln/fkie_cve-2007-4672 <p>Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image.</p> <p>Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2007-4672 https://vulnerability.circl.lu/vuln/ghsa-qg39-p6xp-j59x <p>Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image.</p> <p>Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image.</p> https://vulnerability.circl.lu/vuln/ghsa-qg39-p6xp-j59x https://vulnerability.circl.lu/vuln/gsd-2007-4672 gsd-2007-4672 https://vulnerability.circl.lu/vuln/gsd-2007-4672 https://vulnerability.circl.lu/vuln/var-200711-0300 <p>Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image. User interaction is required to exploit this vulnerability in that the target must open a malicious image file.The specific flaw exists in the parsing of the pict file format. Apple QuickTime is prone to a stack-based buffer-overflow issue because it fails to perform adequate boundary checks on user-supplied data. Failed exploit attempts likely result in denial-of-service conditions. This issue affects Apple QuickTime running on Microsoft Windows Vista, Microsoft Windows XP SP2, and Mac OS X. Apple QuickTime is a popular multimedia player that supports a wide variety of media formats.</p> <p>-- Vendor Response: Apple has issued an update to correct this vulnerability. More details can be found at:</p> <p>http://docs.info.apple.com/article.html?artnum=306896</p> <p>-- Disclosure Timeline: 2007.09.14 - Vulnerability reported to vendor 2007.11.05 - Coordinated public release of advisory</p> <p>-- Credit: This vulnerability was discovered by Ruben Santamarta of reversemode.com.</p> <p>-- About the Zero Day Initiative (ZDI): Established by TippingPoint, The Zero Day Initiative (ZDI) represents a best-of-breed model for rewarding security researchers for responsibly disclosing discovered vulnerabilities.</p> <p>Researchers interested in getting paid for their security research through the ZDI can find more information and sign-up at:…</p> <p>Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image. User interaction is required to exploit this vulnerability in that the target must open a malicious image file.The specific flaw exists in the parsing of the pict file format. Apple QuickTime is prone to a stack-based buffer-overflow issue because it fails to perform adequate boundary checks on user-supplied data. Failed exploit attempts likely result in denial-of-service conditions. This issue affects Apple QuickTime running on Microsoft Windows Vista, Microsoft Windows XP SP2, and Mac OS X. Apple QuickTime is a popular multimedia player that supports a wide variety of media formats.</p> <p>-- Vendor Response: Apple has issued an update to correct this vulnerability. More details can be found at:</p> <p>http://docs.info.apple.com/article.html?artnum=306896</p> <p>-- Disclosure Timeline: 2007.09.14 - Vulnerability reported to vendor 2007.11.05 - Coordinated public release of advisory</p> <p>-- Credit: This vulnerability was discovered by Ruben Santamarta of reversemode.com.</p> <p>-- About the Zero Day Initiative (ZDI): Established by TippingPoint, The Zero Day Initiative (ZDI) represents a best-of-breed model for rewarding security researchers for responsibly disclosing discovered vulnerabilities.</p> <p>Researchers interested in getting paid for their security research through the ZDI can find more information and sign-up at:…</p> https://vulnerability.circl.lu/vuln/var-200711-0300