Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-5406

Опубликовано: 10 дек. 2008
Источник: nvd
CVSS2: 9.3
EPSS Низкий

Описание

Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:itunes:8.0.2.20:*:*:*:*:*:*:*
cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*

EPSS

Процентиль: 90%
0.05984
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

github
больше 3 лет назад

Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."

EPSS

Процентиль: 90%
0.05984
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119