CVE-2007-0015

Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a...

6.8 MediumPublic exploit

Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.

Exploit likelihood

48.8%Down 28.3 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.

Record: CVE-2007-0015
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.

Record: CVE-2007-0015
Updated: 2026-11-02

EUVDEUVD-2007-0019 No score

Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.

Record: EUVD-2007-0019
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xpc5-5qwg-24vr No score

Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a...

Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.

Record: GHSA-xpc5-5qwg-24vr
Updated: 2026-11-02

Affected products

apple quicktime

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Apple QuickTime 7.1.3 - RTSP URI Buffer Overflow (Metasploit)	2010-05-04
Exploit-DB	Apple QuickTime - 'rtsp URL Handler' Remote Stack Buffer Overflow	2007-01-01
Exploit-DB	Apple QuickTime (Windows 2000) - 'rtsp URL Handler' Remote Buffer Overflow	2007-01-03
Metasploit	Apple QuickTime 7.1.3 RTSP URI Buffer Overflow	2007-01-01

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-0015 is a medium vulnerability (CVSS 6.8) in Apple Quicktime, published January 1, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 48.8%, the 98th percentile. No source names a fixed version.

References

Show 11 moreShow less