NVD

Id
3974  
Name
CVE-2008-4116  
Description
Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long type attribute in a quicktime tag (1) on a web page or embedded in a (2) .mp4 or (3) .mov file, possibly related to the Check_stack_cookie function and an off-by-one error that leads to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-18  
Modified Date
2011-01-06  
Seq
2008-4116  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
25332 3974 CVE-2008-4116 oval:org.mitre.oval:def:5936  View
25333 3974 CVE-2008-4116 oval:org.mitre.oval:def:6113  View
25334 3974 CVE-2008-4116 oval:org.mitre.oval:def:7995  View
25335 3974 CVE-2008-4116 4270  View
25336 3974 CVE-2008-4116 6471  View
25337 3974 CVE-2008-4116 31212  View
25338 3974 CVE-2008-4116 quicktime-itunes-checkstackcookie-bo(45311)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48127 JVNDB-2008-003437 Apple QuickTime および iTunes におけるバッファオーバーフローの脆弱性 Apple QuickTime および iTunes には、バッファオーバーフローの脆弱性が存在します。 CVE-2008-4116 34229 CVE-2008-4116 3974 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003437.html 2008-09-18 2012-06-26 View