VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 11, 2008· Updated Jun 16, 2026

CVE-2008-3635

CVE-2008-3635

Description

Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 (aka IV32) codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

22
  • Apple Inc./Quicktime21 versions
    cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*+ 20 more
    • cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*range: <=7.5
    • cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*
    • (no CPE)range: <7.5.5
  • Intel/Indeo Video
    cpe:2.3:a:intel:indeo:3.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.