The version of QuickTime installed on the remote Windows host is older than 7.6. Such versions contain several vulnerabilities :

  - A heap-based buffer overflow in QuickTime's handling of     RTSP URLs may lead to an application crash or arbitrary     code execution. (CVE-2009-0001)

  - A heap-based buffer overflow in QuickTime's handling of     THKD atoms in QTVR (QuickTime Virtual Reality) movie     file may lead to an application crash or arbitrary code     execution. (CVE-2009-0002)

  - A heap-based buffer overflow while processing an AVI     movie file may lead to an application crash or arbitrary     code execution. (CVE-2009-0003)

  - A buffer overflow in the handling of MPEG-2 video files     with MP3 audio content may lead to an application crash     or arbitrary code execution. (CVE-2009-0004)

  - A memory corruption in QuickTime's handling of H.263     encoded movie files may lead to an application crash or     arbitrary code execution. (CVE-2009-0005)

  - A signedness issue in QuickTime's handling of Cinepak     encoded movie files may result in a heap buffer     overflow. (CVE-2009-0006)

  - A heap-based buffer overflow in QuickTime's handling of     jpeg atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2009-0007)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.  Such versions contain several vulnerabilities :

  - A heap buffer overflow in QuickTime's handling of RTSP     URLs may lead to an application crash or arbitrary code     execution. (CVE-2009-0001)

  - A heap buffer overflow in QuickTime's handling of THKD     atoms in QTVR (QuickTime Virtual Reality) movie files     may lead to an application crash or arbitrary code     execution. (CVE-2009-0002)

  - A heap buffer overflow while processing an AVI movie     file may lead to an application crash or arbitrary code     execution. (CVE-2009-0003)

  - A buffer overflow in the handling of MPEG-2 video files     with MP3 audio content may lead to an application crash     or arbitrary code execution. (CVE-2009-0004)

  - A memory corruption in QuickTime's handling of H.263     encoded movie files may lead to an application crash or     arbitrary code execution. (CVE-2009-0005)

  - A signedness issue in QuickTime's handling of Cinepak     encoded movie files may result in a heap buffer     overflow. (CVE-2009-0006)

  - A heap buffer overflow in QuickTime's handling of jpeg     atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2009-0007)

The version of QuickTime installed on the remote host is older than 7.6.  Such versions contain several vulnerabilities : 

  - A heap buffer overflow in QuickTime's handling of RTSP URLs may lead to an application crash or arbitrary code execution. (CVE-2009-0001)

  - A heap buffer overflow in QuickTime's handling of THKD atoms in QTVR (QuickTime Virtual Reality) movie files may lead to an application crash or arbitrary code execution. (CVE-2009-0002)

  - A heap buffer overflow while processing an AVI movie file may lead to an application crash or arbitrary code execution. (CVE-2009-0003)

  - A buffer overflow in the handling of MPEG-2 video files with MP3 audio content may lead to an application crash or arbitrary code execution. (CVE-2009-0004)

  - A memory corruption in QuickTime's handling of H.263 encoded movie files may lead to an application crash or arbitrary code execution. (CVE-2009-0005)

  - A signedness issue in QuickTime's handling of Cinepak encoded movie files may result in a heap buffer overflow. (CVE-2009-0006)

  - A heap buffer overflow in QuickTime's handling of JPEG atoms in QuickTime movie files may lead to an application crash or arbitrary code execution. (CVE-2009-0007)

ID	名稱	產品	系列	已發布	已更新	嚴重性
35437	QuickTime < 7.6 Multiple Vulnerabilities (Windows)	Nessus	Windows	2009/1/22	2018/7/25	high
35436	QuickTime < 7.6 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2009/1/22	2018/7/14	high
4817	QuickTime < 7.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2009/1/22	2019/3/6	medium
801201	QuickTime < 7.6 Multiple Vulnerabilities	Log Correlation Engine	Web Clients			high

偵測

搜尋 Plugin

high

high

medium

high