CVE-2008-3615 ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote attackers to execute....
HighCVSS 9.3
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | < 7.5.5 | 7.5.5 |
References
- APPLE-SA-2008-09-09 mailing-list vendor-advisory
- 31821 third-party-advisory
- 1020841 third-party-advisory vdb-entry
- support.apple.com patch vendor-advisory
- www.ngssoftware.com broken-link
- 20080915 Critical Vulnerability in Apple Quicktimeâ??s Indeo Codec mailing-list third-party-advisory vdb-entry
- 31086 patch third-party-advisory vdb-entry
- ADV-2008-2527 third-party-advisory vdb-entry