CVE-2008-2010
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Unspecified vulnerability in Apple QuickTime Player on Windows XP SP2 and Vista SP1 allows remote attackers to execute arbitrary code via a crafted QuickTime media file. NOTE: as of 20080429, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
Vulnerabilidad no especificada en Apple QuickTime Player de Windows XP SP2 y Vista SP1 permite a atacantes remotos ejecutar código de su elección a través de un fichero media QuickTime manipulado.
NOTA: a fecha 29/04/2008, la única revelación es un vago preaviso sin información de uso inmediato. Sin embargo, dado que proviene de un investigador reputado, se le ha asignado un identificador CVE con propósito de seguimiento.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2008-04-29 CVE Reserved
- 2008-04-29 CVE Published
- 2024-08-07 CVE Updated
- 2024-10-01 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp | X_refsource_misc | |
| http://www.securityfocus.com/bid/28959 | Vdb Entry | |
| http://www.securitytracker.com/id?1019950 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/42098 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | * | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Vista Search vendor "Microsoft" for product "Windows Vista" | - | sp1 |
Safe
|
| Apple Search vendor "Apple" | Quicktime Search vendor "Apple" for product "Quicktime" | * | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | sp2 |
Safe
|