Lucene search

K
cve[email protected]CVE-2008-1023
HistoryApr 04, 2008 - 5:44 p.m.

CVE-2008-1023

2008-04-0417:44:00
CWE-119
web.nvd.nist.gov
22
cve-2008-1023
heap-based buffer overflow
apple quicktime
nvd
security vulnerability
buffer overflow
pict image file

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file.

Affected configurations

NVD
Node
applequicktimeRange7.4.4
CPENameOperatorVersion
apple:quicktimeapple quicktimele7.4.4

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

Related for CVE-2008-1023