CVE-2008-3626: Buffer Overflow
The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the samplesizetable in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3626?
CVE-2008-3626 is classified as a high-severity vulnerability due to its potential to allow remote code execution and cause denial of service.
How do I fix CVE-2008-3626?
The recommended fix for CVE-2008-3626 is to upgrade Apple QuickTime to version 7.5.5 or later.
What versions of Apple QuickTime are affected by CVE-2008-3626?
CVE-2008-3626 affects multiple versions of Apple QuickTime, including versions 5.0 through 7.4.5.
What are the potential impacts of exploiting CVE-2008-3626?
Exploitation of CVE-2008-3626 can lead to arbitrary code execution, memory corruption, and application crashes.
Is there a workaround for CVE-2008-3626 if I cannot update?
There are no known effective workarounds for CVE-2008-3626, and upgrading to the latest version is the best course of action.