← Database

CVE-2008-5406

CRITICAL CVSS: 9.3 Published: 2008-12-10 Modified: 2026-06-16

Description

Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."

Affected Platforms

Apple ItunesApple Quicktime

Weakness Type

CWE-119

References