CVE-2007-4676

N/A Unknown

Published: November 07, 2007 Modified: April 23, 2026

Description

Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://docs.info.apple.com/article.html?artnum=306896

Source: cve@mitre.org

Vendor Advisory

http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html

Source: cve@mitre.org

Vendor Advisory

http://osvdb.org/38546

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/27523

Source: cve@mitre.org

Third Party Advisory

http://securityreason.com/securityalert/3351

Source: cve@mitre.org

Third Party Advisory

http://www.kb.cert.org/vuls/id/690515

Source: cve@mitre.org

Third Party Advisory US Government Resource

http://www.securityfocus.com/archive/1/483311/100/0/threaded

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://www.securityfocus.com/archive/1/483313/100/0/threaded

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://www.securityfocus.com/bid/26345

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://www.securitytracker.com/id?1018894

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://www.us-cert.gov/cas/techalerts/TA07-310A.html

Source: cve@mitre.org

Third Party Advisory US Government Resource

http://www.vupen.com/english/advisories/2007/3723

Source: cve@mitre.org

Third Party Advisory

http://www.zerodayinitiative.com/advisories/ZDI-07-066.html

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-07-067.html

Source: cve@mitre.org

Third Party Advisory VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/38280

Source: cve@mitre.org

Third Party Advisory VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/38281

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://docs.info.apple.com/article.html?artnum=306896