Unspecified vulnerability in Apple QuickTime 7.2 on Windows XP allows remote attackers to execute arbitrary code via unknown attack…

Description

Unspecified vulnerability in Apple QuickTime 7.2 on Windows XP allows remote attackers to execute arbitrary code via unknown attack vectors, probably a different vulnerability than CVE-2007-6166. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release advisories with actionable information. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine. However, the organization has stated that this is different than CVE-2007-6166.

Scores

EPSS (exploitation in 30 days)

3.9% · top 9.5% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 10.0.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (5)

• http://wslabi.com/wabisabilabi/showBidInfo.do?code=ZD-00000185 (opens in a new tab)x_refsource_MISCx_transferred
• 26682 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• quicktime-unspecified-code-execution(38852) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 1019039 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• http://wabisabilabi.blogspot.com/2007/11/quicktime-zeroday-vulnerability-still.html (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2007-6238](https://trackcve.app/badge/CVE-2007-6238.svg)](https://trackcve.app/cve/CVE-2007-6238)

Record last updated 7 Aug 2024, 16:02 UTC.