CVE-2008-0033 Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file with Image Descriptor...
HighCVSS 9.3
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file with Image Descriptor (IDSC) atoms containing an invalid atom size, which triggers memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | <= 7.3.1.70 | No fix listed |
References
- docs.info.apple.com
- dvlabs.tippingpoint.com
- APPLE-SA-2008-01-15 vendor-advisory
- 28502 third-party-advisory vendor-advisory
- 20080115 TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability mailing-list
- 27299 vdb-entry
- 1019221 vdb-entry
- TA08-016A third-party-advisory us-government-resource
- ADV-2008-0148 vdb-entry vendor-advisory
- quicktime-idsc-code-execution(39697) vdb-entry