CVE-2008-0036: Buffer Overflow
Published Jan 16, 2008
·Updated
Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding.
Affected Software
1 affected component
QuickTime Player<=7.3
Event History
Jan 16, 2008
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0036?
CVE-2008-0036 is categorized as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2008-0036?
To fix CVE-2008-0036, upgrade to Apple QuickTime version 7.4 or later.
3
What type of attack does CVE-2008-0036 involve?
CVE-2008-0036 involves a buffer overflow attack triggered by a crafted compressed PICT image.
4
Which versions of Apple QuickTime are affected by CVE-2008-0036?
CVE-2008-0036 affects versions of Apple QuickTime prior to 7.4.
5
Can CVE-2008-0036 be exploited remotely?
Yes, CVE-2008-0036 can be exploited remotely by attackers using specially crafted image files.