CVE-2007-6166: Apple Quicktime

High severity, CVSS 9.3. EPSS: 41.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.

Affected products

• Apple Quicktime: up to and including 7.3; affected versions not specified; version 3.0 only; version 4.1.2 only; version 5.0 only; version 5.0.1 only; …
• Apple Safari: any version

Published 2007-11-29. Last modified 2026-06-16.