VULNERABILITY INTELLIGENCE

CVE-2007-2394

CVSS score9.3 HIGH
EPSS probability12.14%
CISA KEVNot currently listed
Published2007-07-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.

Primary references