The version of QuickTime installed on the remote Mac OS X host is older than 7.3.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted file with QuickTime.

The version of QuickTime installed on the remote Windows host is older than 7.3.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted file with QuickTime.

The remote host is affected by the vulnerability described in GLSA-200803-08 (Win32 binary codecs: Multiple vulnerabilities)

    Multiple buffer overflow, heap overflow, and integer overflow     vulnerabilities were discovered in the Quicktime plugin when processing     MOV, FLC, SGI, H.264 and FPX files.
  Impact :

    A remote attacker could entice a user to open a specially crafted video     file, possibly resulting in the remote execution of arbitrary code with     the privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

The version of QuickTime installed on the remote Windows host is older than 7.3.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if the user can be convinced to open a specially-crafted file with QuickTime.

ID	名稱	產品	系列	已發布	已更新	嚴重性
27625	QuickTime < 7.3 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2007/11/6	2018/7/14	high
27626	QuickTime < 7.3 Multiple Vulnerabilities (Windows)	Nessus	Windows	2007/11/6	2018/11/15	high
31383	GLSA-200803-08 : Win32 binary codecs: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2008/3/7	2021/1/6	high
4277	QuickTime < 7.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2007/11/5	2019/3/6	medium
801186	QuickTime < 7.3 Multiple Vulnerabilities	Log Correlation Engine	Web Clients			high

偵測

搜尋 Plugin

high

high

high

medium

high