PT-2008-2618 · Apple · Apple Quicktime

Publicado 2008-04-04 · Atualizado 2017-08-08 · CVE-2008-1016

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.4.5

Description The issue arises from improper handling of movie media tracks, allowing remote attackers to execute arbitrary code via a crafted movie that triggers memory corruption.

Recommendations For Apple QuickTime versions prior to 7.4.5, update to version 7.4.5 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-1016

Produtos afetados

Apple Quicktime

Referências · 8

• http://securitytracker.com/id?1019760 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41605 · Nota
• http://securityfocus.com/bid/28583 · Nota
• http://secunia.com/advisories/29650 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2008-1016 · Nota de Segurança
• http://vupen.com/english/advisories/2008/1078 · Nota
• http://us-cert.gov/cas/techalerts/TA08-094A.html · Correção
• http://support.apple.com/kb/HT1241 · Nota