CVE-2008-0778 Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbit...
HighCVSS 7.5
EPSS 9.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the (1) SetBgColor, (2) SetHREF, (3) SetMovieName, (4) SetTarget, and (5) SetMatrix methods.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | <= 7.4.1 | No fix listed |
References
- 3652 third-party-advisory
- 20080212 QuickTime <= 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow mailing-list
- 27769 exploit vdb-entry
- apple-quicktime-qtplugin-bo(40475) vdb-entry
- 5110 exploit