CVE-2008-5406

Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

9.73% chance of exploitation in the next 30 days, 95th percentile

Published

2008-12-09

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/7296

References

• CVE Record
• NVD entry

Related

• CVE-2008-5405
• CVE-2008-5409
• CVE-2008-5394
• CVE-2008-5416
• CVE-2008-5383
• CVE-2008-5418