| Max CVSS | 6.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-1021 | 6.8 |
Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding.
|
11-10-2018 - 20:29 | 04-04-2008 - 17:44 | |
| CVE-2008-1018 | 6.8 |
Heap-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via an MP4A movie with a malformed Channel Compositor (aka chan) atom.
|
11-10-2018 - 20:29 | 04-04-2008 - 17:44 | |
| CVE-2008-1019 | 6.8 |
Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted PICT image file, related to an improperly terminated memory copy loop.
|
11-10-2018 - 20:29 | 04-04-2008 - 17:44 | |
| CVE-2008-1017 | 6.8 |
Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.
|
11-10-2018 - 20:29 | 04-04-2008 - 17:44 | |
| CVE-2008-1022 | 6.8 |
Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted VR movie with an obji atom of zero size.
|
11-10-2018 - 20:29 | 04-04-2008 - 17:44 | |
| CVE-2008-1020 | 6.8 |
Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak encoding, related to error checking and error messages.
|
11-10-2018 - 20:29 | 04-04-2008 - 17:44 | |
| CVE-2008-1023 | 6.8 |
Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file.
|
08-08-2017 - 01:29 | 04-04-2008 - 17:44 | |
| CVE-2008-1016 | 6.8 |
Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbitrary code via a crafted movie that triggers memory corruption.
|
08-08-2017 - 01:29 | 04-04-2008 - 17:44 | |
| CVE-2008-1013 | 6.8 |
Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet.
|
08-08-2017 - 01:29 | 04-04-2008 - 17:44 | |
| CVE-2008-1015 | 6.8 |
Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.
|
08-08-2017 - 01:29 | 04-04-2008 - 17:44 | |
| CVE-2008-1014 | 4.3 |
Apple QuickTime before 7.4.5 does not properly handle external URLs in movies, which allows remote attackers to obtain sensitive information.
|
08-08-2017 - 01:29 | 04-04-2008 - 17:44 |