CVE-2008-3629

Опубликовано: 11 сент. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Apple QuickTime before 7.5.5 allows remote attackers to cause a denial of service (application crash) via a crafted PICT image that triggers an out-of-bounds read.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*

Версия до 7.5 (включая)

cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01369

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-29rc-j772-rjx8

github

больше 3 лет назад