ID CVE-2007-0588
Summary The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption in the _GetSrcBits32ARGB function. NOTE: this issue might overlap CVE-2007-0462.
References
Vulnerable Configurations
  • cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*
    cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*
CVSS
Base: 7.1 (as of 15-08-2013 - 05:21)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:C
refmap via4
apple APPLE-SA-2007-03-13
bid 22228
cert TA07-072A
cert-vn VU#396820
confirm http://docs.info.apple.com/article.html?artnum=305214
misc http://security-protocols.com/sp-x43-advisory.php
osvdb 33365
sectrack 1017760
secunia 24479
vupen ADV-2007-0930
Last major update 15-08-2013 - 05:21
Published 30-01-2007 - 18:28
Back to Top