CVE-2008-0778

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the (1) SetBgColor, (2) SetHREF, (3) SetMovieName, (4) SetTarget, and (5) SetMatrix methods.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

9.21% chance of exploitation in the next 30 days, 95th percentile

Published

2008-02-14

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/5110

Security advisories

• http://www.securityfocus.com/bid/27769

References

• CVE Record
• NVD entry