{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-11-05T00:00:00", "descriptions": [{"lang": "en", "value": "An \"integer arithmetic\" error in Apple QuickTime 7.2 allows remote attackers to execute arbitrary code via a crafted movie file containing a movie atom with a large size value, which triggers a stack-based buffer overflow."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "APPLE-SA-2008-10-02", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00000.html"}, {"name": "ADV-2008-2735", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/2735"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://docs.info.apple.com/article.html?artnum=306896"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.apple.com/kb/HT3189"}, {"name": "20071114 TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/483717/100/100/threaded"}, {"name": "43716", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/43716"}, {"name": "GLSA-200803-08", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200803-08.xml"}, {"name": "32121", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/32121"}, {"name": "26443", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/26443"}, {"tags": ["x_refsource_MISC"], "url": "http://dvlabs.tippingpoint.com/advisory/TPTI-07-20"}, {"name": "29182", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/29182"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-4674", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An \"integer arithmetic\" error in Apple QuickTime 7.2 allows remote attackers to execute arbitrary code via a crafted movie file containing a movie atom with a large size value, which triggers a stack-based buffer overflow."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "APPLE-SA-2008-10-02", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00000.html"}, {"name": "ADV-2008-2735", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/2735"}, {"name": "http://docs.info.apple.com/article.html?artnum=306896", "refsource": "CONFIRM", "url": "http://docs.info.apple.com/article.html?artnum=306896"}, {"name": "http://support.apple.com/kb/HT3189", "refsource": "CONFIRM", "url": "http://support.apple.com/kb/HT3189"}, {"name": "20071114 TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/483717/100/100/threaded"}, {"name": "43716", "refsource": "OSVDB", "url": "http://osvdb.org/43716"}, {"name": "GLSA-200803-08", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200803-08.xml"}, {"name": "32121", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/32121"}, {"name": "26443", "refsource": "BID", "url": "http://www.securityfocus.com/bid/26443"}, {"name": "http://dvlabs.tippingpoint.com/advisory/TPTI-07-20", "refsource": "MISC", "url": "http://dvlabs.tippingpoint.com/advisory/TPTI-07-20"}, {"name": "29182", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29182"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-4674", "datePublished": "2007-11-27T20:00:00", "dateReserved": "2007-09-05T00:00:00", "dateUpdated": "2018-10-15T20:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apple:quicktime:7.2:*:_mac_os_x_v10.3.9:*:*:*:*:*", "matchCriteriaId": "621A609C-2787-4C2B-ABD1-D43486FAEC3C", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:quicktime:7.2:*:_mac_os_x_v10.4.9:*:*:*:*:*", "matchCriteriaId": "B3C36FAE-5FC5-4E98-BADE-776090E367BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:quicktime:7.2:*:_mac_os_x_v10.5:*:*:*:*:*", "matchCriteriaId": "510F6CCA-4141-4FBE-96B5-72B8D9FD9669", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:quicktime:7.2:*:windows_vista:*:*:*:*:*", "matchCriteriaId": "92C765C2-0709-4343-B474-35629729C875", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:quicktime:7.2:*:windows_xp_sp2:*:*:*:*:*", "matchCriteriaId": "33CC9D0A-24CA-413D-B4AC-766A79F4B5AE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An \"integer arithmetic\" error in Apple QuickTime 7.2 allows remote attackers to execute arbitrary code via a crafted movie file containing a movie atom with a large size value, which triggers a stack-based buffer overflow."}, {"lang": "es", "value": "Un error de \"aritm\u00e9tica de enteros\" en Apple QuickTime 7.2 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante un archivo de pel\u00edcula manipulado que contiene un \u00e1tomo de pel\u00edcula (atom movie) con un valor de tama\u00f1o grande, lo cual dispara un desbordamiento de b\u00fafer basado en pila."}], "id": "CVE-2007-4674", "lastModified": "2018-10-15T21:36:51.170", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2007-11-27T20:46:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://docs.info.apple.com/article.html?artnum=306896"}, {"source": "cve@mitre.org", "url": "http://dvlabs.tippingpoint.com/advisory/TPTI-07-20"}, {"source": "cve@mitre.org", "url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00000.html"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/43716"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/29182"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/32121"}, {"source": "cve@mitre.org", "url": "http://security.gentoo.org/glsa/glsa-200803-08.xml"}, {"source": "cve@mitre.org", "url": "http://support.apple.com/kb/HT3189"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/483717/100/100/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/26443"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/2735"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}