The version of QuickTime installed on the remote Windows host is older than 7.5.5.  Such versions contain several vulnerabilities :

  - An integer overflow in QuickTime's handling of PICT     images may lead to an application crash or arbitrary     code execution (CVE-2008-3614).

  - An uninitialized memory access issue in the third-     party Indeo v5 codec, which does not ship with     QuickTime, may lead to an application crash or arbitrary     code execution (CVE-2008-3615).

  - Heap and stack-based buffer overflows in the handling of     panorama atoms in QTVR (QuickTime Virtual Reality)     movie files could lead to an application crash or     arbitrary code execution (CVE-2008-3624 and     CVE-2008-3625).

  - A memory corruption issue in QuickTime's handling of     STSZ atoms in movie files could lead to an     application crash or arbitrary code execution     (CVE-2008-3626).

  - Multiple memory corruption issues in QuickTime's     handling of H.264-encoded movie files could lead to     an application crash or arbitrary code execution     (CVE-2008-3627).

  - An invalid pointer issue in QuickTime's handling of     PICT images could lead to an application crash or     arbitrary code execution (CVE-2008-3628).

  - An out-of-bounds read issue in QuickTime's handling     of PICT images could lead to an application crash     (CVE-2008-3629).

  - A stack-based buffer overflow exists in the third-party     Indeo v3.2 codec for QuickTime, which could lead to an     application crash or arbitrary code execution when     viewing a specially crafted movie file (CVE-2008-3635).

The version of QuickTime installed on the remote Mac OS X host is older than 7.5.5.  Such versions contain several vulnerabilities :

  - Heap and stack-based buffer overflows in the handling of     panorama atoms in QTVR (QuickTime Virtual Reality)     movie files could lead to an application crash or     arbitrary code execution (CVE-2008-3624 and     CVE-2008-3625).

  - A memory corruption issue in QuickTime's handling of     STSZ atoms in movie files could lead to an     application crash or arbitrary code execution     (CVE-2008-3626).

  - Multiple memory corruption issues in QuickTime's     handling of H.264-encoded movie files could lead to     an application crash or arbitrary code execution     (CVE-2008-3627).

  - An out-of-bounds read issue in QuickTime's handling     of PICT images could lead to an application crash     (CVE-2008-3629).

 The version of QuickTime installed on the remote host is older than 7.5.5.  Such versions contain several vulnerabilities :

  - Heap and stack buffer overflows in the handling of panorama atoms in QTVR (QuickTime Virtual Reality) movie files could lead to an application crash or arbitrary code execution (CVE-2008-3624 and CVE-2008-3625).
  - A memory corruption issue in QuickTime's handling of STSZ atoms in movie files could lead to an application crash or arbitrary code execution (CVE-2008-3626).
  - Multiple memory corruption issues in QuickTime's handling of H.264-encoded movie files could lead to an application crash or arbitrary code execution (CVE-2008-3627).
  - An out-of-bounds read issue in QuickTime's handling of PICT images could lead to an application crash (CVE-2008-3629).

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.5.  Mac OS X 10.5.5 contains security fixes for a number of programs.

ID	名稱	產品	系列	已發布	已更新	嚴重性
34119	QuickTime < 7.5.5 Multiple Vulnerabilities (Windows)	Nessus	Windows	2008/9/10	2018/7/25	high
34118	QuickTime < 7.5.5 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2008/9/10	2018/7/14	high
4651	QuickTime < 7.5.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2008/9/10	2019/3/6	medium
4682	Mac OS X < 10.5.5 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2008/9/16	2019/3/6	critical

偵測

搜尋 Plugin

high

high

medium

critical