Lucene search

K
cve[email protected]CVE-2008-0778
HistoryFeb 14, 2008 - 12:00 p.m.

CVE-2008-0778

2008-02-1412:00:00
CWE-119
web.nvd.nist.gov
35
cve-2008-0778
buffer overflow
activex control
qtplugin.ocx
apple quicktime
denial of service
remote attackers
arbitrary code
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.849 High

EPSS

Percentile

98.5%

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the (1) SetBgColor, (2) SetHREF, (3) SetMovieName, (4) SetTarget, and (5) SetMatrix methods.

Affected configurations

NVD
Node
applequicktimeRange7.4.1
CPENameOperatorVersion
apple:quicktimeapple quicktimele7.4.1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.849 High

EPSS

Percentile

98.5%