CVE-2007-4675
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple...
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.
- Record
CVE-2007-4675- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.
- Record
CVE-2007-4675- Updated
- 2026-11-02
EUVDEUVD-2007-4657 No score
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.
- Record
EUVD-2007-4657- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ggwj-wrgj-7mh6 No score
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple...
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.
- Record
GHSA-ggwj-wrgj-7mh6- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4675 is a high vulnerability (CVSS 9.3) in Apple Mac Os X, published November 7, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 32.8%, the 98th percentile. No source names a fixed version.
References
us-cert.gov/cas/techalerts/TA07-310A.html
securityfocus.com/bid/26342
48bits.com/advisories/qt_pdat_heapbof.pdf
docs.info.apple.com/article.html?artnum=306896
labs.idefense.com/intelligence/vulnerabilities/display.php?id=620
Show 9 moreShow less
osvdb.org/38545
exchange.xforce.ibmcloud.com/vulnerabilities/38282
lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html
blog.48bits.com?p=176
secunia.com/advisories/27523
securitytracker.com/id?1018894
vupen.com/english/advisories/2007/3723
nvd.nist.gov/vuln/detail/CVE-2007-4675
github.com/advisories/GHSA-ggwj-wrgj-7mh6