CVE-2008-0032: Medium severity quicktime player vulnerability
Published Jan 16, 2008
·Updated
Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption.
Affected Software
1 affected component
QuickTime Player<=7.3
Remediation
Event History
Jan 16, 2008
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0032?
CVE-2008-0032 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2008-0032?
To fix CVE-2008-0032, upgrade to Apple QuickTime version 7.4 or later.
3
What software is affected by CVE-2008-0032?
CVE-2008-0032 affects Apple QuickTime versions prior to 7.4, specifically version 7.3 and earlier.
4
Can CVE-2008-0032 be exploited remotely?
Yes, CVE-2008-0032 can be exploited remotely through specially crafted movie files.
5
What type of vulnerability is CVE-2008-0032?
CVE-2008-0032 is a heap corruption vulnerability that can lead to arbitrary code execution.