CVE-2008-0778

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-02-14 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the (1) SetBgColor, (2) SetHREF, (3) SetMovieName, (4) SetTarget, and (5) SetMatrix methods.

Affected products

Apple Installer of QuickTime for Windows: through 7.4.1

References

http://securityreason.com/securityalert/3652
http://www.securityfocus.com/archive/1/488045/100/0/threaded
http://www.securityfocus.com/bid/27769
https://exchange.xforce.ibmcloud.com/vulnerabilities/40475
https://www.exploit-db.com/exploits/5110
http://securityreason.com/securityalert/3652
http://www.securityfocus.com/archive/1/488045/100/0/threaded
http://www.securityfocus.com/bid/27769
https://exchange.xforce.ibmcloud.com/vulnerabilities/40475
https://www.exploit-db.com/exploits/5110

Get alerted when CVE-2008-0778 or the next vulnerability affects your stack