CVE-2008-0234: Apple Quicktime

High severity, CVSS 9.3. EPSS: 12.4% chance of exploitation in the next 30 days.

Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message.

Affected products

• Apple Quicktime: version 7.3.1.70 only; version 7.4 only

Published 2008-01-11. Last modified 2026-06-16.