CVE-2008-0032 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2008-0032
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0032

Description: Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/39696 ST 1019221 SAID Secunia Advisory: SA28502 IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=642 CONFIRM http://docs.info.apple.com/article.html?artnum=307301 CERT http://www.us-cert.gov/cas/techalerts/TA08-016A.html BID 27301 APPLE http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html

Return to the previous page.