{
    "id": "CVE-2007-6166",
    "published": "2007-11-29 01:46:00",
    "last_modified": "2026-06-16 22:47:31",
    "cvss_score": "9.3",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
    "cwe": "CWE-119",
    "description": "Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.",
    "epss_score": "0.41916",
    "epss_percentile": "0.98646",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-27 18:17:07",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "apple",
            "product": "mac_os_x"
        },
        {
            "vendor": "apple",
            "product": "quicktime"
        },
        {
            "vendor": "apple",
            "product": "safari"
        },
        {
            "vendor": "microsoft",
            "product": "windows_vista"
        },
        {
            "vendor": "microsoft",
            "product": "windows_xp"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "16873",
            "title": "Apple QuickTime (Mac OSX) - RTSP Content-Type Overflow (Metasploit)",
            "date": "2010-10-09",
            "url": "https://www.exploit-db.com/exploits/16873"
        },
        {
            "source": "exploit-db",
            "ref_id": "16424",
            "title": "Apple QuickTime 7.3 - RTSP Response Header Buffer Overflow (Metasploit)",
            "date": "2010-05-09",
            "url": "https://www.exploit-db.com/exploits/16424"
        },
        {
            "source": "exploit-db",
            "ref_id": "11027",
            "title": "Apple QuickTime 7.2/7.3 - RTSP Buffer Overflow",
            "date": "2010-01-06",
            "url": "https://www.exploit-db.com/exploits/11027"
        },
        {
            "source": "exploit-db",
            "ref_id": "6013",
            "title": "Apple Safari / QuickTime 7.3 - RTSP Content-Type Remote Buffer Overflow",
            "date": "2008-07-06",
            "url": "https://www.exploit-db.com/exploits/6013"
        },
        {
            "source": "exploit-db",
            "ref_id": "4664",
            "title": "Apple QuickTime 7.2/7.3 - RSTP Response Universal",
            "date": "2007-11-27",
            "url": "https://www.exploit-db.com/exploits/4664"
        },
        {
            "source": "exploit-db",
            "ref_id": "4657",
            "title": "Apple QuickTime 7.2/7.3 (Internet Explorer 7 / Firefox / Opera) - RTSP Response Universal",
            "date": "2007-11-26",
            "url": "https://www.exploit-db.com/exploits/4657"
        },
        {
            "source": "exploit-db",
            "ref_id": "4651",
            "title": "Apple QuickTime 7.2/7.3 (Windows Vista/XP) - RSTP Response Code Execution",
            "date": "2007-11-24",
            "url": "https://www.exploit-db.com/exploits/4651"
        },
        {
            "source": "exploit-db",
            "ref_id": "4648",
            "title": "Apple QuickTime 7.2/7.3 - RTSP Response Remote Overwrite (SEH)",
            "date": "2007-11-23",
            "url": "https://www.exploit-db.com/exploits/4648"
        }
    ],
    "refs_list": [
        "http://docs.info.apple.com/article.html?artnum=307176",
        "http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html",
        "http://secunia.com/advisories/27755",
        "http://secunia.com/advisories/29182",
        "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "http://securityreason.com/securityalert/3410",
        "http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control",
        "http://www.kb.cert.org/vuls/id/659761",
        "http://www.securityfocus.com/bid/26549",
        "http://www.securityfocus.com/bid/26560",
        "http://www.securitytracker.com/id?1018989",
        "http://www.us-cert.gov/cas/techalerts/TA07-334A.html",
        "http://www.vupen.com/english/advisories/2007/3984",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/38604",
        "https://www.exploit-db.com/exploits/4648",
        "https://www.exploit-db.com/exploits/6013",
        "http://docs.info.apple.com/article.html?artnum=307176",
        "http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html",
        "http://secunia.com/advisories/27755",
        "http://secunia.com/advisories/29182",
        "http://security.gentoo.org/glsa/glsa-200803-08.xml",
        "http://securityreason.com/securityalert/3410",
        "http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control",
        "http://www.kb.cert.org/vuls/id/659761",
        "http://www.securityfocus.com/bid/26549"
    ]
}