CVE-2008-3614

Published: Sep 11, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, which triggers heap corruption.

Affected (20)

Products: Apple: Quicktime

1 product

Configuration A

20 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Apple Quicktime	Up to 7.5
Apple Quicktime	Version 7.0.1
Apple Quicktime	Version 7.0.2
Apple Quicktime	Version 7.0.3
Apple Quicktime	Version 7.0.4
Apple Quicktime	Version 7.0
Apple Quicktime	Version 7.1.1
Apple Quicktime	Version 7.1.2
Apple Quicktime	Version 7.1.3
Apple Quicktime	Version 7.1.4
Apple Quicktime	Version 7.1.5
Apple Quicktime	Version 7.1.6
Apple Quicktime	Version 7.1
Apple Quicktime	Version 7.2
Apple Quicktime	Version 7.3.1.70
Apple Quicktime	Version 7.3.1
Apple Quicktime	Version 7.3
Apple Quicktime	Version 7.4.1
Apple Quicktime	Version 7.4.5
Apple Quicktime	Version 7.4

Running on/with	Platform Versions
Microsoft Windows Nt	Version xp sp3
Microsoft Windows Vista	All versions
Microsoft Windows Xp	All versions

Related CWEs

References (28)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=744

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

Source: cve@mitre.org

http://secunia.com/advisories/31821

Source: cve@mitre.org

http://secunia.com/advisories/31882

Source: cve@mitre.org

http://securitytracker.com/id?1020841

Source: cve@mitre.org

http://support.apple.com/kb/HT3027

Source: cve@mitre.org

http://support.apple.com/kb/HT3137

Source: cve@mitre.org

http://www.securityfocus.com/bid/31086

Source: cve@mitre.org

http://www.securitytracker.com/id?1020879

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA08-260A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2008/2527

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2584

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15851

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=744

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31821

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31882

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1020841

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3027

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3137

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/31086

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1020879

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA08-260A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2008/2527

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2584

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15851

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.