cve/2008/CVE-2008-5406.md

CVE-2008-5406

Description

Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."

POC

Reference

• http://securityreason.com/securityalert/4704
• https://www.exploit-db.com/exploits/7296

Github

No PoCs found on GitHub currently.