Apple iTunes Filetype Remote Off-By-One Stack Buffer Overflow Vulnerability| ID: oval:org.mitre.oval:def:7995 | Date: (C)2010-01-12 (M)2022-01-13 |
| Class: VULNERABILITY | Family: windows |
Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long type attribute in a quicktime tag (1) on a web page or embedded in a (2) .mp4 or (3) .mov file, possibly related to the Check_stack_cookie function and an off-by-one error that leads to a heap-based buffer overflow.
| Platform: |
| Microsoft Windows 11 |
| Microsoft Windows Server 2022 |
| Microsoft Windows Server 2019 |
| Microsoft Windows 2000 |
| Microsoft Windows 7 |
| Microsoft Windows 8.1 |
| Microsoft Windows Server 2012 R2 |
| Microsoft Windows 8 |
| Microsoft Windows Server 2003 |
| Microsoft Windows Server 2008 |
| Microsoft Windows Server 2012 |
| Microsoft Windows Vista |
| Microsoft Windows XP |
| Microsoft Windows Server 2008 R2 |
| Microsoft Windows 10 |
| Microsoft Windows Server 2016 |
| Product: |
| Apple iTunes |
| Apple QuickTime |
