CVE-2008-5406: Buffer Overflow
Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5406?
CVE-2008-5406 is classified as critical because it can lead to a remote denial of service and potential arbitrary code execution.
How do I fix CVE-2008-5406?
The best way to fix CVE-2008-5406 is to update to the latest versions of Apple QuickTime Player and iTunes that are not vulnerable.
What software versions are affected by CVE-2008-5406?
CVE-2008-5406 affects Apple QuickTime Player version 7.5.5 and iTunes version 8.0.2.20.
What type of attack does CVE-2008-5406 enable?
CVE-2008-5406 enables remote attackers to cause a denial of service and potentially execute arbitrary code.
How does CVE-2008-5406 exploit buffer overflow?
CVE-2008-5406 exploits a stack-based buffer overflow through specially crafted MOV files with long arguments, leading to an off-by-one overflow.