Unrated severityNVD Advisory· Published Apr 4, 2008· Updated Jun 16, 2026

CVE-2008-1016

Description

Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbitrary code via a crafted movie that triggers memory corruption.

Affected products

Apple Inc./Quicktime2 versions
cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*range: <=7.4.4
- (no CPE)range: <7.4.5

Patches

Vulnerability mechanics

References

secunia.com/advisories/29650nvdPatch
www.us-cert.gov/cas/techalerts/TA08-094A.htmlnvdPatchUS Government Resource
securitytracker.com/idnvd
support.apple.com/kb/HT1241nvd
www.securityfocus.com/bid/28583nvd
www.vupen.com/english/advisories/2008/1078nvd
exchange.xforce.ibmcloud.com/vulnerabilities/41605nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000