CVE-2007-6166

Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.

• CWE-119

• http://docs.info.apple.com/article.html?artnum=307176
• http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html
• http://secunia.com/advisories/27755Vendor Advisory
• http://secunia.com/advisories/29182Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200803-08.xml
• http://securityreason.com/securityalert/3410
• http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control
• http://www.kb.cert.org/vuls/id/659761US Government Resource
• http://www.securityfocus.com/bid/26549
• http://www.securityfocus.com/bid/26560
• http://www.securitytracker.com/id?1018989
• http://www.us-cert.gov/cas/techalerts/TA07-334A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/3984Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38604
• https://www.exploit-db.com/exploits/4648
• https://www.exploit-db.com/exploits/6013
• http://docs.info.apple.com/article.html?artnum=307176
• http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html
• http://secunia.com/advisories/27755Vendor Advisory
• http://secunia.com/advisories/29182Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200803-08.xml
• http://securityreason.com/securityalert/3410
• http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control
• http://www.kb.cert.org/vuls/id/659761US Government Resource
• http://www.securityfocus.com/bid/26549
• http://www.securityfocus.com/bid/26560
• http://www.securitytracker.com/id?1018989
• http://www.us-cert.gov/cas/techalerts/TA07-334A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/3984Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38604
• https://www.exploit-db.com/exploits/4648
• https://www.exploit-db.com/exploits/6013

Published

Nov 29, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-6160Cross-site scripting (XSS) vulnerability in index.php in Til…
• CVE-2007-6161index.php in Tilde CMS 4.x and earlier allows remote attacke…
• CVE-2007-6162Cross-site scripting (XSS) vulnerability in index.php in FMD…
• CVE-2007-6163SQL injection vulnerability in admin/index2.asp in GOUAE DWD…
• CVE-2007-6164Multiple SQL injection vulnerabilities in Eurologon CMS allo…
• CVE-2007-6165Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted…
• CVE-2007-6167Untrusted search path vulnerability in yast2-core in SUSE Li…
• CVE-2007-6168SQL injection vulnerability in default.asp in VU Case Manage…
• CVE-2007-6169SQL injection vulnerability in admin/index2.asp in GOUAE DWD…
• CVE-2007-6170SQL injection vulnerability in the Call Detail Record Postgr…
• CVE-2007-6171SQL injection vulnerability in the Postgres Realtime Engine …
• CVE-2007-6172Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow r…