Unscored severity · published Dec 10, 2008
CVE-2008-5406
Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute…
–
CVSS
9.7%
EPSS
No
On KEV
Description
Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."
Exploitation
Is it being used?
Exploit prediction (EPSS)9.7% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IT
Itunes · Apple
8.0.2.20 · source: NVD
QU
Quicktime · Apple
7.5.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5406
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5406
securityreason.com
http://securityreason.com/securityalert/4704
www.securityfocus.com
http://www.securityfocus.com/bid/32540
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/46984
www.exploit-db.com
https://www.exploit-db.com/exploits/7296
More from Itunes
8.8
CVE-2019-8506
Apple Multiple Products Type Confusion Vulnerability
7.8
CVE-2020-27932
Apple Multiple Products Type Confusion Vulnerability
10.0
CVE-2019-6235
A memory corruption issue was addressed with improved validation
9.8
CVE-2022-26711
An integer overflow issue was addressed with improved input validation
9.8
CVE-2019-8756
Multiple memory corruption issues were addressed with improved input validation