CVEvulnerability
CVE-2008-2010
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-04-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in Apple QuickTime Player on Windows XP SP2 and Vista SP1 allows remote attackers to execute arbitrary code via a crafted QuickTime media file. NOTE: as of 20080429, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
Affected configurations
• apple quicktime
References
- http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/ www.gnucitizen.org
- http://www.securityfocus.com/bid/28959 www.securityfocus.com
- http://www.securitytracker.com/id?1019950 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42098 exchange.xforce.ibmcloud.com
- http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/ www.gnucitizen.org
- http://www.securityfocus.com/bid/28959 www.securityfocus.com
- http://www.securitytracker.com/id?1019950 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42098 exchange.xforce.ibmcloud.com