{"id":"CVE-2007-6166","aliases":["EUVD-2007-6135","GHSA-mrqv-c428-3hfp"],"status":"published","title":"Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on...","description":"Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.41769,"percentile":0.98696,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2007-11-29T01:00:00Z","modified":"2026-06-16T22:47:31Z","exploits":[{"source":"exploitdb","id":"EDB-11027","title":"Apple QuickTime 7.2/7.3 - RTSP Buffer Overflow","type":"remote","platform":"windows","date":"2010-01-06","verified":true,"url":"https://www.exploit-db.com/exploits/11027"},{"source":"exploitdb","id":"EDB-16424","title":"Apple QuickTime 7.3 - RTSP Response Header Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-05-09","verified":true,"url":"https://www.exploit-db.com/exploits/16424"},{"source":"exploitdb","id":"EDB-16873","title":"Apple QuickTime (Mac OSX) - RTSP Content-Type Overflow (Metasploit)","type":"remote","platform":"osx","date":"2010-10-09","verified":true,"url":"https://www.exploit-db.com/exploits/16873"},{"source":"exploitdb","id":"EDB-4648","title":"Apple QuickTime 7.2/7.3 - RTSP Response Remote Overwrite (SEH)","type":"dos","platform":"multiple","date":"2007-11-23","verified":true,"url":"https://www.exploit-db.com/exploits/4648"},{"source":"exploitdb","id":"EDB-4651","title":"Apple QuickTime 7.2/7.3 (Windows Vista/XP) - RSTP Response Code Execution","type":"remote","platform":"windows","date":"2007-11-24","verified":true,"url":"https://www.exploit-db.com/exploits/4651"},{"source":"exploitdb","id":"EDB-4657","title":"Apple QuickTime 7.2/7.3 (Internet Explorer 7 / Firefox / Opera) - RTSP Response Universal","type":"remote","platform":"windows","date":"2007-11-26","verified":true,"url":"https://www.exploit-db.com/exploits/4657"},{"source":"exploitdb","id":"EDB-4664","title":"Apple QuickTime 7.2/7.3 - RSTP Response Universal","type":"remote","platform":"windows","date":"2007-11-27","verified":true,"url":"https://www.exploit-db.com/exploits/4664"},{"source":"exploitdb","id":"EDB-6013","title":"Apple Safari / QuickTime 7.3 - RTSP Content-Type Remote Buffer Overflow","type":"remote","platform":"osx","date":"2008-07-06","verified":true,"url":"https://www.exploit-db.com/exploits/6013"},{"source":"metasploit","id":"exploit/osx/rtsp/quicktime_rtsp_content_type","title":"MacOS X QuickTime RTSP Content-Type Overflow","type":"exploit","platform":"OSX","date":"2007-11-23","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/osx/rtsp/quicktime_rtsp_content_type"},{"source":"metasploit","id":"exploit/windows/misc/apple_quicktime_rtsp_response","title":"Apple QuickTime 7.3 RTSP Response Header Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-11-23","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/misc/apple_quicktime_rtsp_response"}],"products":[{"vendor":"apple","product":"quicktime"},{"vendor":"apple","product":"safari"}],"references":[{"url":"http://www.securityfocus.com/bid/26549","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://securityreason.com/securityalert/3410","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/4648","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://docs.info.apple.com/article.html?artnum=307176","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-08.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.securityfocus.com/bid/26560","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-334A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/659761","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38604","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/6013","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/3984","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/27755","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29182","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1018989","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6166"},{"url":"https://github.com/advisories/GHSA-mrqv-c428-3hfp"}],"sources":{"cve":[{"id":"CVE-2007-6166","description":"Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.","status":"published","published":"2007-11-29T01:00:00Z","modified":"2024-08-07T15:54:26.985Z","updated_at":"2026-11-02T13:33:07.91528Z"}],"euvd":[{"id":"EUVD-2007-6135","description":"Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.","status":"published","published":"2007-11-29T01:00:00Z","modified":"2024-08-07T15:54:26Z","updated_at":"2026-11-03T01:16:14.290993Z"}],"ghsa":[{"id":"GHSA-mrqv-c428-3hfp","title":"Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on...","description":"Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.","status":"published","published":"2022-05-01T18:40:07Z","modified":"2023-01-31T05:04:59Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:48:46.289568Z"}],"nvd":[{"id":"CVE-2007-6166","description":"Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.","status":"published","published":"2007-11-29T01:46:00Z","modified":"2026-06-16T22:47:31.567Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:23.208914Z"}]}}