CVE-2008-0033: Critical severity quicktime player vulnerability
Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file with Image Descriptor (IDSC) atoms containing an invalid atom size, which triggers memory corruption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0033?
CVE-2008-0033 is considered a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2008-0033?
To fix CVE-2008-0033, users should update their Apple QuickTime software to version 7.4 or later.
What types of attacks can exploit CVE-2008-0033?
CVE-2008-0033 can be exploited via specially crafted movie files that contain invalid atom sizes, leading to memory corruption.
What versions of QuickTime are affected by CVE-2008-0033?
CVE-2008-0033 affects Apple QuickTime versions prior to 7.4, including those up to 7.3.1.70.
Can CVE-2008-0033 lead to remote code execution?
Yes, CVE-2008-0033 allows remote attackers to potentially execute arbitrary code due to improper handling of movie files.