CVE-2008-5406: Apple iTunes
High severity, CVSS 9.3. EPSS: 9.7% chance of exploitation in the next 30 days.
Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."
Affected products
Published 2008-12-10. Last modified 2026-06-16.