CVE-2008-3626

Related Files

Zero Day Initiative Advisory 08-059

Posted Sep 10, 2008

Authored by Tipping Point | Site zerodayinitiative.com

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the handling of STSZ atoms within the function CallComponentFunctionWithStorage(). When an entry in the sample_size_table is too large, a memory corruption occurs which can be further leveraged to execute arbitrary code under the context of the current user.

tags | advisory, remote, arbitrary

systems | apple

advisories | CVE-2008-3626

SHA-256 | 2d1888b9c7264e11b6198be6e6eb29d6724803b19f1b271a1621eeee0c98eddf

Download | Favorite | View