CVE-2008-3628

CRITICAL 9.3CVE-2008-3628 · Published 11/09/2008 · updated 16/06/2026

In short

CVE-2008-3628 is a CRITICAL (CVSS 9.3) vulnerability affecting quicktime (apple).
Chance of exploitation in the next 30 days (EPSS): 4.0%, higher than 90.5% of all vulnerabilities.
Fix: update to 7.5.5 or later.

Package	Affected versions	Patched versions
quicktime apple	`< 7.5.5`	`7.5.5`

Description

Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, related to an "invalid pointer issue."

References

lists.apple.com/archives/security-announce//2008/Sep/msg00000.html · Mailing List
secunia.com/advisories/31821 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
support.apple.com/kb/HT3027 · Patch
securityfocus.com/bid/31086 · Patch
vupen.com/english/advisories/2008/2527 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15841 · Third Party Advisory

More vulnerabilities in quicktime

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

quicktime

apple

< 7.5.5

7.5.5

More vulnerabilities in quicktime

See all →