CVE-2007-6166

🗓️ 29 Nov 2007 01:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 65 Views🌐 WEB

CVE-2007-6166 Stack-based buffer overflow in Apple QuickTime before 7.3.

Reporter	Title	Published	Views	Family All 26
Tenable Nessus	QuickTime < 7.3.1 Multiple Vulnerabilities	14 Dec 200700:00	–	nessus
Tenable Nessus	GLSA-200803-08 : Win32 binary codecs: Multiple vulnerabilities	7 Mar 200800:00	–	nessus
Tenable Nessus	QuickTime < 7.3.1 Multiple Vulnerabilities (Mac OS X)	14 Dec 200700:00	–	nessus
Tenable Nessus	QuickTime < 7.3.1 Multiple Vulnerabilities (Windows)	14 Dec 200700:00	–	nessus
Circl	CVE-2007-6166	6 Jul 200800:00	–	circl
Check Point Advisories	Apple QuickTime RTSP Response Crafted Content-Type Header Buffer Overflow (CVE-2007-6166)	27 Nov 200700:00	–	checkpoint_advisories
Cvelist	CVE-2007-6166	29 Nov 200701:00	–	cvelist
Exploit DB	Apple QuickTime 7.3 - RTSP Response Header Buffer Overflow (Metasploit)	9 May 201000:00	–	exploitdb
Exploit DB	Apple QuickTime (Mac OSX) - RTSP Content-Type Overflow (Metasploit)	9 Oct 201000:00	–	exploitdb
Gentoo Linux	Win32 binary codecs: Multiple vulnerabilities	4 Mar 200800:00	–	gentoo

NVD

Node

apple quicktimeRange≤7.3

OR

apple quicktimeMatch-

OR

apple quicktimeMatch3.0

OR

apple quicktimeMatch4.1.2

OR

apple quicktimeMatch5.0

OR

apple quicktimeMatch5.0.1

OR

apple quicktimeMatch5.0.2

OR

apple quicktimeMatch6.0

OR

apple quicktimeMatch6.1

OR

apple quicktimeMatch6.5

OR

apple quicktimeMatch6.5.1

OR

apple quicktimeMatch6.5.2

OR

apple quicktimeMatch7.0

OR

apple quicktimeMatch7.0.1

OR

apple quicktimeMatch7.0.2

OR

apple quicktimeMatch7.0.3

OR

apple quicktimeMatch7.0.4

OR

apple quicktimeMatch7.1

OR

apple quicktimeMatch7.1.1

OR

apple quicktimeMatch7.1.2

OR

apple quicktimeMatch7.1.3

OR

apple quicktimeMatch7.1.4

OR

apple quicktimeMatch7.1.5

OR

apple quicktimeMatch7.1.6

OR

apple quicktimeMatch7.2

AND

microsoft windows_vista

OR

microsoft windows_xpsp2

Node

AND

apple mac_os_xMatch10.3.9

OR

apple mac_os_xMatch10.4.9

OR

apple mac_os_xMatch10.5

OR

apple mac_os_xMatch10.5.0

OR

apple mac_os_xMatch10.5.1

OR

apple mac_os_xMatch10.5.2

OR

apple mac_os_xMatch10.5.3

OR

apple mac_os_xMatch10.5.4

OR

apple mac_os_xMatch10.5.5

OR

apple mac_os_xMatch10.5.6

OR

apple mac_os_xMatch10.5.7

OR

apple mac_os_xMatch10.5.8

Source	Link
vupen	www.vupen.com/english/advisories/2007/3984
securityfocus	www.securityfocus.com/bid/26560
us-cert	www.us-cert.gov/cas/techalerts/TA07-334A.html
secunia	www.secunia.com/advisories/29182
lists	www.lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html
beskerming	www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control
securitytracker	www.securitytracker.com/id
exploit-db	www.exploit-db.com/exploits/4648
exploit-db	www.exploit-db.com/exploits/6013
securityreason	www.securityreason.com/securityalert/3410

Parameter	Position	Path	Description	CWE
Content-Type	header	milw0rm.com/exploits/4648	Buffer overflow in RTSP Content-Type header can trigger code execution via a crafted RTSP response.	CWE-119

16 Jun 2026 22:47Current

7.6High risk

Vulners AI Score7.6

CVSS 29.3

EPSS0.41916

cve-2007-6166 apple quicktime buffer overflow rtsp rce security vulnerability