{ "schema_version": "1.4.0", "id": "GHSA-mj44-3pg8-598c", "modified": "2022-05-01T17:45:30Z", "published": "2022-05-01T17:45:30Z", "aliases": [ "CVE-2007-0588" ], "details": "The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption in the _GetSrcBits32ARGB function. NOTE: this issue might overlap CVE-2007-0462.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0588" }, { "type": "WEB", "url": "http://docs.info.apple.com/article.html?artnum=305214" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/24479" }, { "type": "WEB", "url": "http://security-protocols.com/sp-x43-advisory.php" }, { "type": "WEB", "url": "http://www.kb.cert.org/vuls/id/396820" }, { "type": "WEB", "url": "http://www.osvdb.org/33365" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/22228" }, { "type": "WEB", "url": "http://www.securitytracker.com/id?1017760" }, { "type": "WEB", "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2007/0930" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2007-01-30T18:28:00Z" } }