CVE-2008-4116: Buffer Overflow
Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long type attribute in a quicktime tag (1) on a web page or embedded in a (2) .mp4 or (3) .mov file, possibly related to the Checkstackcookie function and an off-by-one error that leads to a heap-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4116?
CVE-2008-4116 has a high severity level due to its potential to cause remote code execution and denial of service.
How do I fix CVE-2008-4116?
To fix CVE-2008-4116, update to the latest versions of Apple QuickTime and iTunes that address this vulnerability.
What versions of software are affected by CVE-2008-4116?
CVE-2008-4116 affects Apple QuickTime 7.5.5 and iTunes 8.0.
What type of attack can CVE-2008-4116 facilitate?
CVE-2008-4116 can facilitate a buffer overflow attack that may lead to remote code execution or browser crashes.
Is CVE-2008-4116 related to specific file types?
Yes, CVE-2008-4116 is related to vulnerabilities in .mp4 and .mov files with specific quicktime tags.