CVE-2007-4676
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute...
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
- Record
CVE-2007-4676- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
- Record
CVE-2007-4676- Updated
- 2026-11-02
EUVDEUVD-2007-4658 No score
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
- Record
EUVD-2007-4658- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6q3w-rp64-hvgj No score
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute...
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
- Record
GHSA-6q3w-rp64-hvgj- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4676 is a high vulnerability (CVSS 9.3) in Apple Mac Os X, published November 7, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 46.7%, the 98th percentile. No source names a fixed version.
References
zerodayinitiative.com/advisories/ZDI-07-066.html
us-cert.gov/cas/techalerts/TA07-310A.html
docs.info.apple.com/article.html?artnum=306896
exchange.xforce.ibmcloud.com/vulnerabilities/38280
securityreason.com/securityalert/3351
osvdb.org/38546
Show 12 moreShow less
lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html
secunia.com/advisories/27523
kb.cert.org/vuls/id/690515
securityfocus.com/archive/1/483311/100/0/threaded
securitytracker.com/id?1018894
vupen.com/english/advisories/2007/3723
nvd.nist.gov/vuln/detail/CVE-2007-4676
github.com/advisories/GHSA-6q3w-rp64-hvgj