VULNERABILITY INTELLIGENCE

CVE-2007-0714

CVSS score9.3 HIGH
EPSS probability8.23%
CISA KEVNot currently listed
Published2007-03-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QuickTime movie with a User Data Atom (UDTA) with an Atom size field with a large value.

Primary references