Intrusion PreventionApple.QuickTime.Media.File.Processing.Command.Execution
Description
This indicates an attempt to exploit a vulnerability in Apple Quicktime versions earlier than 7.2 on Mac OS X 10.3.9 and 10.4.9. It is possible to cause an integer overflow because the software fails to check the width field in the "smil" file. This may allow a remote attacker to cause a denial of service by sending a crafted "smil" file.
Affected Products
Apple QuickTime versions prior to 7.2
Impact
Denial of service.
Recommended Actions
Apply patch, available from the Web site.
Upgrade to Apple QuickTime version 7.2 for Mac:
Upgrade to Apple QuickTime version 7.2 for Windows:
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-12-11 | 16.978 |
| ID | 14789 |
| Created | Jul 24, 2007 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2007-2402 CVE-2007-2396 CVE-2007-2394 CVE-2007-2392 CVE-2007-2393 |
| Exploit Prediction Score | 72.12% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, MacOS |
| Affected App | Apple |