CVE-2008-3628 Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, related to an "invalid pointer issu...
HighCVSS 9.3
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, related to an "invalid pointer issue."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | < 7.5.5 | 7.5.5 |
References
- APPLE-SA-2008-09-09 mailing-list vendor-advisory
- 31821 third-party-advisory
- 1020841 third-party-advisory vdb-entry
- support.apple.com patch vendor-advisory
- 31086 patch third-party-advisory vdb-entry
- ADV-2008-2527 third-party-advisory vdb-entry
- oval:org.mitre.oval:def:15841 signature third-party-advisory vdb-entry