CVE-2008-1017 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Quicktime

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer6 documents5 sources

Severity

6.8MEDIUMNVD

EPSS

23.6%

top 4.01%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Quicktime

Timeline

PublishedApr 4

Latest updateMay 1

Description

Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDapple/quicktime7.4.4

Patches

Patch: secunia.com ↗Patch: www.us-cert.gov ↗Patch: secunia.com ↗

🔴Vulnerability Details

GHSA

GHSA-36gw-23f9-q2qg: Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime↗2022-05-01

▶

CVEList

CVE-2008-1017: Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime↗2008-04-04

▶

💥Exploits & PoCs

Exploit-DB

SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site Scripting↗2008-05-08

▶

Exploit-DB

SAP Internet Transaction Server 6200.1017.50954.0 Bu (WGate) - 'wgate.dll?~service' Cross-Site Scripting↗2008-05-08

▶

💬Community

Bugzilla

CVE-2007-3999 krb5 RPC library buffer overflow [Fdevel]↗2007-11-01

▶