CVE-2008-3635: Buffer Overflow
Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 (aka IV32) codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3635?
CVE-2008-3635 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2008-3635?
To mitigate CVE-2008-3635, update your Apple QuickTime to version 7.5.5 or later.
What software is affected by CVE-2008-3635?
CVE-2008-3635 affects Apple QuickTime versions prior to 7.5.5, particularly when using the Indeo v3.2 codec.
Can CVE-2008-3635 cause a denial of service?
Yes, CVE-2008-3635 can lead to a denial of service, causing the application to crash.
What codec is related to CVE-2008-3635?
The vulnerability CVE-2008-3635 is associated with the Indeo v3.2 codec used in QuickTime.