Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.8

Apple QuickTime can crash or run code from malicious QTIF

CVE-2007-0716 · published 19 years ago
Summary

The QuickTime media player for Windows versions before 7.1.5 can be tricked into opening a specially crafted QTIF image file. Doing so may cause the program to stop working or, in rare cases, let an attacker run unwanted code on the computer. Update QuickTime to version 7.1.5 or later, or stop using QuickTime on affected machines.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
apple quicktime 7.0
7.0.1
7.0.2
7.0.3
7.0.4
7.1
7.1.1
7.1.2
7.1.3
7.1.4
cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*
Original advisory text
Stack-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QTIF file.
Stack-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QTIF file.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.8 Medium
Exploitation
6% chance of attack within 30 days
Timeline
Published5 Mar 2007
Updated19 Oct 2026
First seen29 Sep 2026
Sources
CVE-2007-0716 · NVD
Track software like this
Free during beta