CVE-2008-3635

no score yetEPSS 6.1%

Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 (aka IV32) codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

EPSS: 6.1% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2008-09-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:quicktime
intel:indeo

References

http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html
http://secunia.com/advisories/31821
http://securitytracker.com/id?1020841
http://support.apple.com/kb/HT3027
http://www.securityfocus.com/archive/1/496201/100/0/threaded

Check your stack JSON