CVE-2008-3625 Stack-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) mo...
HighCVSS 9.3
EPSS 6.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted (1) maxTilt, (2) minFieldOfView, and (3) maxFieldOfView elements in panorama track PDAT atoms.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | < 7.5.5 | 7.5.5 |
References
- APPLE-SA-2008-09-09 mailing-list vendor-advisory
- 31821 third-party-advisory
- 1020841 third-party-advisory vdb-entry
- support.apple.com patch vendor-advisory
- 20080909 ZDI-08-058: Apple QuickTime Panorama PDAT Atom Parsing Buffer Overflow Vulnerability mailing-list
- 31086 patch third-party-advisory vdb-entry
- ADV-2008-2527 third-party-advisory vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- oval:org.mitre.oval:def:15935 signature third-party-advisory vdb-entry