First published: Wed Sep 03 2008(Updated: )
Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple QuickTime Player | =7.3.1 | |
Apple QuickTime Player | =6.5.1 | |
Apple QuickTime Player | <=7.4.4 | |
Apple QuickTime Player | =5.0 | |
Apple QuickTime Player | =7.0.3 | |
Apple QuickTime Player | =7.1.5 | |
Apple QuickTime Player | =7.0.1 | |
Apple QuickTime Player | =7.0 | |
Apple QuickTime Player | =7.1.6 | |
Apple QuickTime Player | =7.4.1 | |
Apple QuickTime Player | =5.0.2 | |
Apple QuickTime Player | =7.0.2 | |
Apple QuickTime Player | =5.0.1 | |
Apple QuickTime Player | =7.4 | |
Apple QuickTime Player | =3.0 | |
Apple QuickTime Player | =7.0.4 | |
Apple QuickTime Player | =6.1 | |
Apple QuickTime Player | =6.5 | |
Apple QuickTime Player | =7.3.1.70 | |
Apple QuickTime Player | =7.1.2 | |
Apple QuickTime Player | =7.1 | |
Apple QuickTime Player | =7.1.1 | |
Apple QuickTime Player | =7.3 | |
Apple QuickTime Player | =7.1.4 | |
Apple QuickTime Player | =6.5.2 | |
Apple QuickTime Player | =7.1.3 | |
Apple QuickTime Player | =7.2 | |
Apple QuickTime Player | =6.0 | |
Apple QuickTime Player |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-1739 has a medium severity rating due to its potential to cause denial of service and possibly allow arbitrary code execution.
To fix CVE-2008-1739, users should upgrade Apple QuickTime to version 7.4.5 or later, which addresses this vulnerability.
CVE-2008-1739 affects Apple QuickTime versions prior to 7.4.5, including 7.3.1, 6.5.1, and older versions.
CVE-2008-1739 facilitates denial of service attacks that may also result in memory corruption leading to arbitrary code execution.
Yes, CVE-2008-1739 can be exploited through specially crafted ftyp atoms in movie files, leading to potential crashes and code execution.