CVE ID:	CVE-2007-6166
Description:	Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6166 http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html BugTraq ID: 26549 http://www.securityfocus.com/bid/26549 BugTraq ID: 26560 http://www.securityfocus.com/bid/26560 Cert/CC Advisory: TA07-334A http://www.us-cert.gov/cas/techalerts/TA07-334A.html CERT/CC vulnerability note: VU#659761 http://www.kb.cert.org/vuls/id/659761 https://www.exploit-db.com/exploits/4648 https://www.exploit-db.com/exploits/6013 http://security.gentoo.org/glsa/glsa-200803-08.xml http://docs.info.apple.com/article.html?artnum=307176 http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control http://www.securitytracker.com/id?1018989 http://secunia.com/advisories/27755 http://secunia.com/advisories/29182 http://securityreason.com/securityalert/3410 http://www.vupen.com/english/advisories/2007/3984 XForce ISS Database: quicktime-rtsp-contenttype-bo(38604) https://exchange.xforce.ibmcloud.com/vulnerabilities/38604