Unrated severityNVD Advisory· Published Jan 11, 2008· Updated Jun 16, 2026
CVE-2008-0234
CVE-2008-0234
Description
Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*
- cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*
- Range: <7.4.1
Patches
Vulnerability mechanics
References
20- lists.apple.com/archives/security-announce/2008//Jul/msg00000.htmlnvdPatchVendor Advisory
- securityreason.com/securityalert/3537nvdExploit
- www.securityfocus.com/bid/27225nvdExploit
- secunia.com/advisories/28423nvdVendor Advisory
- secunia.com/advisories/31034nvdVendor Advisory
- www.vupen.com/english/advisories/2008/0107nvdVendor Advisory
- www.vupen.com/english/advisories/2008/2064/referencesnvdVendor Advisory
- www.kb.cert.org/vuls/id/112179nvdUS Government Resource
- lists.apple.com/archives/security-announce/2008/Feb/msg00001.htmlnvd
- www.securityfocus.com/archive/1/486091/100/0/threadednvd
- www.securityfocus.com/archive/1/486114/100/0/threadednvd
- www.securityfocus.com/archive/1/486161/100/0/threadednvd
- www.securityfocus.com/archive/1/486174/100/0/threadednvd
- www.securityfocus.com/archive/1/486238/100/0/threadednvd
- www.securityfocus.com/archive/1/486241/100/0/threadednvd
- www.securityfocus.com/archive/1/486268/100/0/threadednvd
- www.securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/39601nvd
- www.exploit-db.com/exploits/4885nvd
- www.exploit-db.com/exploits/4906nvd
News mentions
0No linked articles in our index yet.