CVE-2007-0015: apple quicktime
Vulnerability summary
CVE-2007-0015 is a medium (CVSS 6.8) vulnerability in apple quicktime. EPSS estimates a 48.79% chance of exploitation in the next 30 days, higher than 98.8% of scored vulnerabilities. 7 public exploits are recorded.
Timeline
- 01-01-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
48.79%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.12 pp
From 48.67% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
7 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (projects.info-pull.com)
Maturity: unknown
Exploit Reference (securitytracker.com)
Maturity: unknown
Show all 7 exploits
Apple QuickTime - 'rtsp URL Handler' Remote Stack Buffer Overflow
Maturity: weaponized
Apple QuickTime (Windows 2000) - 'rtsp URL Handler' Remote Buffer Overflow
Maturity: weaponized
Apple QuickTime 7.1.3 - RTSP URI Buffer Overflow (Metasploit)
Maturity: weaponized
Apple QuickTime 7.1.3 RTSP URI Buffer Overflow
exploit/windows/browser/apple_quicktime_rtsp
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Apple1 product
- quicktime7.1.3
1 vendor · 1 product
References
15 links- isc.sans.org/diary.html?storyid=2094X Refsource MISC
- www.us-cert.gov/cas/techalerts/TA07-005A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- secunia.com/blog/7/X Refsource MISC
Show all 15 references
- docs.info.apple.com/article.html?artnum=304989X Refsource CONFIRM