CVE-2007-2175

60Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 84%

da publicação à arma0 dias

Publicada no NVD24 de abr.

1ª PoC23 de abr.

metasploit23 de abr.

probabilidade de exploração

84%top 1% das CVEs

exploração observada

nãonenhuma fonte reporta

3 exploit(s) público(s)

Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory when creating QTPointerRef objects, as demonstrated during the "PWN 2 0WN" contest at CanSecWest 2007.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 3

exploitdbwww.exploit-db.com/exploits/16295não verificado exploitdbwww.exploit-db.com/exploits/29884não verificado exploitdbwww.exploit-db.com/exploits/9943não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Referências

http://cansecwest.com/post/2007-04-20-14:54:00.First_Mac_Hacked_Cancel_Or_Allow http://docs.info.apple.com/article.html?artnum=305446 http://lists.apple.com/archives/security-announce/2007/May/msg00001.html https://exchange.xforce.ibmcloud.com/vulnerabilities/33827 http://www.kb.cert.org/vuls/id/420668 http://www.matasano.com/log/806/hot-off-the-matasano-sms-queue-cansec-macbook-challenge-won/http://www.matasano.com/log/812/breaking-macbook-vuln-in-quicktime-affects-win32-apple-code/http://www.osvdb.org/34178 http://www.securityfocus.com/archive/1/467319/100/0/threaded http://www.securitytracker.com/id?1017950 http://www.theregister.co.uk/2007/04/20/pwn-2-own_winner/http://www.zerodayinitiative.com/advisories/ZDI-07-023.html