Lucene search

MitreCVE-2008-3624

HistorySep 11, 2008 - 1:13 a.m.

CVE-2008-3624

2008-09-1101:13:09

CWE-119

mitre

web.nvd.nist.gov

cve-2008-3624

apple

quicktime

buffer overflow

remote attackers

arbitrary code execution

denial of service

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

0.013

Percentile

86.2%

JSON

Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted panorama atoms.

Affected configurations

Nvd

Node

applequicktimeRange≤7.5

applequicktimeMatch7.0

applequicktimeMatch7.0.1

applequicktimeMatch7.0.2

applequicktimeMatch7.0.3

applequicktimeMatch7.0.4

applequicktimeMatch7.1

applequicktimeMatch7.1.1

applequicktimeMatch7.1.2

applequicktimeMatch7.1.3

applequicktimeMatch7.1.4

applequicktimeMatch7.1.5

applequicktimeMatch7.1.6

applequicktimeMatch7.2

applequicktimeMatch7.3

applequicktimeMatch7.3.1

applequicktimeMatch7.3.1.70

applequicktimeMatch7.4

applequicktimeMatch7.4.1

applequicktimeMatch7.4.5

AND

applemac_os_xMatch10.4.9

applemac_os_xMatch10.4.10

applemac_os_xMatch10.4.11

applemac_os_xMatch10.5

applemac_os_xMatch10.5.1

applemac_os_xMatch10.5.2

applemac_os_xMatch10.5.3

applemac_os_xMatch10.5.4

microsoftwindows-ntMatchxpsp3

microsoftwindows_vistaMatch-

microsoftwindows_xpMatch-sp2

VendorProductVersionCPE
applequicktime*cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*
applequicktime7.0cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*
applequicktime7.0.1cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*
applequicktime7.0.2cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*
applequicktime7.0.3cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*
applequicktime7.0.4cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*
applequicktime7.1cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*
applequicktime7.1.1cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*
applequicktime7.1.2cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*
applequicktime7.1.3cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	quicktime	*	cpe:2.3:a:apple:quicktime::::::::
apple	quicktime	7.0	cpe:2.3:a:apple:quicktime:7.0:::::::*
apple	quicktime	7.0.1	cpe:2.3:a:apple:quicktime:7.0.1:::::::*
apple	quicktime	7.0.2	cpe:2.3:a:apple:quicktime:7.0.2:::::::*
apple	quicktime	7.0.3	cpe:2.3:a:apple:quicktime:7.0.3:::::::*
apple	quicktime	7.0.4	cpe:2.3:a:apple:quicktime:7.0.4:::::::*
apple	quicktime	7.1	cpe:2.3:a:apple:quicktime:7.1:::::::*
apple	quicktime	7.1.1	cpe:2.3:a:apple:quicktime:7.1.1:::::::*
apple	quicktime	7.1.2	cpe:2.3:a:apple:quicktime:7.1.2:::::::*
apple	quicktime	7.1.3	cpe:2.3:a:apple:quicktime:7.1.3:::::::*

Rows per page:

1-10 of 311

References

lists.apple.com/archives/security-announce//2008/Sep/msg00000.html

secunia.com/advisories/31821

securitytracker.com/id?1020841

support.apple.com/kb/HT3027

www.securityfocus.com/bid/31086

www.vupen.com/english/advisories/2008/2527

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16124

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

0.013

Percentile

86.2%

JSON

Related for CVE-2008-3624