CVE-2004-0988: Integer Overflow
Published Oct 28, 2004
·Updated
Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service (memory consumption) via certain inputs that cause a large memory operation.
Affected Software
5 affected components
QuickTime Player=6.5.1
QuickTime Player=5.0.2
QuickTime Player=6.1
QuickTime Player=6.5
QuickTime Player=6.0
Event History
Oct 28, 2004
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0988?
CVE-2004-0988 has a medium severity level due to its potential for causing denial of service.
2
How does CVE-2004-0988 exploit integer overflow?
CVE-2004-0988 exploits an integer overflow in Apple QuickTime that leads to excessive memory usage.
3
Is my version of QuickTime affected by CVE-2004-0988?
QuickTime versions 5.0.2 and 6.0 to 6.5.1 are affected by CVE-2004-0988.
4
What can I do to mitigate CVE-2004-0988?
To mitigate CVE-2004-0988, upgrade to QuickTime version 6.5.2 or later.
5
Can CVE-2004-0988 be exploited remotely?
Yes, CVE-2004-0988 can be exploited remotely through crafted inputs that manipulate memory.