CVE-2008-0032: Apple Quicktime

Medium severity, CVSS 5.8. EPSS: 3.8% chance of exploitation in the next 30 days.

Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption.

Affected products

• Apple Quicktime: up to and including 7.3

Published 2008-01-16. Last modified 2026-06-16.