CVE-2008-3624

Published: Sep 11, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted panorama atoms.

Affected (20)

Products: Apple: Quicktime

Apple

1 product

Quicktime

Configuration A

20 vulnerable · 11 platform

Vulnerable Software	Affected Versions
Apple Quicktime	Up to 7.5
Apple Quicktime	Version 7.0.1
Apple Quicktime	Version 7.0.2
Apple Quicktime	Version 7.0.3
Apple Quicktime	Version 7.0.4
Apple Quicktime	Version 7.0
Apple Quicktime	Version 7.1.1
Apple Quicktime	Version 7.1.2
Apple Quicktime	Version 7.1.3
Apple Quicktime	Version 7.1.4
Apple Quicktime	Version 7.1.5
Apple Quicktime	Version 7.1.6
Apple Quicktime	Version 7.1
Apple Quicktime	Version 7.2
Apple Quicktime	Version 7.3.1.70
Apple Quicktime	Version 7.3.1
Apple Quicktime	Version 7.3
Apple Quicktime	Version 7.4.1
Apple Quicktime	Version 7.4.5
Apple Quicktime	Version 7.4

Running on/with	Platform Versions
Apple Mac Os X	Version 10.4.10
Apple Mac Os X	Version 10.4.11
Apple Mac Os X	Version 10.4.9
Apple Mac Os X	Version 10.5.1
Apple Mac Os X	Version 10.5.2
Apple Mac Os X	Version 10.5.3
Apple Mac Os X	Version 10.5.4
Apple Mac Os X	Version 10.5
Microsoft Windows Nt	Version xp sp3
Microsoft Windows Vista	All versions
Microsoft Windows Xp	All versions