CVE-2008-1018

Related Files

Zero Day Initiative Advisory 08-016

Posted Apr 4, 2008

Authored by Tipping Point | Site zerodayinitiative.com

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the parsing of the QuickTime Channel Compositor atom. When the movie file contains a malformed 'chan' atom, a heap corruption occurs resulting in the execution of arbitrary code. Version 7.4.1 is affected.

tags | advisory, remote, arbitrary

systems | apple

advisories | CVE-2008-1018

SHA-256 | 9baf29867e60d70514a0820f86774a72ec460c6815f08156f0313155b4967b56

Download | Favorite | View