cbcvebase.
CVE-2008-5406
published 2008-12-10

CVE-2008-5406: Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and…

critical9.3CVSS 3.1
AVNACMAuNCCICAC
EXPLOIT
Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."

Affected

2 ranges
VendorProductVersion rangeFixed in
appleitunes
applequicktime