The version of Apple QuickTime installed on the remote Windows host is prior to 7.7.7. It is, therefore, affected by multiple vulnerabilities :

  - An arbitrary code execution vulnerability exists due to     improper validation of user-supplied input. An attacker     can exploit this, with specially crafted image data in     an SGI file, to execute arbitrary code. (CVE-2015-3661)

  - An arbitrary code execution vulnerability exists due to     an out-of-bounds write flaw caused by improper     validation of user-supplied input. An attacker can     exploit this, with specially crafted image data in     a GIF file, to execute arbitrary code. (CVE-2015-3662)

  - An arbitrary code execution vulnerability exists due to     an out-of-bounds write flaw caused by improper     validation of user-supplied input. An attacker can     exploit this, with a specially crafted image descriptor     in a GIF file, to execute arbitrary code.
    (CVE-2015-3663)

  - An overflow condition exists due to improper validation     of user-supplied input when handling 'alis' atoms. An     attacker can exploit this, with a specially crafted     file, to cause a stack-based buffer overflow, resulting     in a denial of service condition or the execution of     arbitrary code. (CVE-2015-3664)

  - A user-after-free error exists when handling object     properties in movie files. An attacker can exploit this,     with a specially crafted movie file, to dereference     already freed memory, potentially resulting in the     execution of arbitrary code. (CVE-2015-3665)

  - A memory corruption flaw exists due to improper     validation of user-supplied input when handling the     'code' atom within the 'minf' (Media Information) atom.
    An attacker can exploit this, with a specially crafted     file, to corrupt memory, potentially resulting in the     execution of arbitrary code. (CVE-2015-3666)

  - A user-after-free error exists in the     QuickTimeMPEG4!0x147f0() function when handling 'stbl'     atoms. An attacker can exploit this, with a specially     crafted .MOV file, to dereference already freed memory,     potentially resulting in the execution of arbitrary     code. (CVE-2015-3667)

  - A memory corruption flaw exists due to improper     validation of user-supplied input when handling movie     files. An attacker can exploit this, with a specially     crafted file, to corrupt memory, potentially resulting     in the execution of arbitrary code. (CVE-2015-3668)

  - An overflow condition exists due to improper validation     of user-supplied input. An attacker can exploit this,     with a specially crafted SGI file, to cause a heap-based     buffer overflow, potentially resulting in the execution     of arbitrary code. (CVE-2015-3669)

リモート Windows ホストにインストールされた Apple QuickTime のバージョンは、7.7.7 以前のバージョンです。したがって、以下の複数の脆弱性による影響を受けます。

  - ユーザー指定の入力を適切に検証していないため、任意のコード実行の脆弱性が存在します。An attacker can exploit this, with specially crafted image data in an SGI file, to execute arbitrary code. (CVE-2015-3661)

  - ユーザー提供の入力の不適切な検証によって引き起こされる領域外書き込みの欠陥により、任意のコードが実行される脆弱性が存在します。An attacker can exploit this, with specially crafted image data in a GIF file, to execute arbitrary code. (CVE-2015-3662)

  - ユーザー提供の入力の不適切な検証によって引き起こされる領域外書き込みの欠陥により、任意のコードが実行される脆弱性が存在します。攻撃者が、これを悪用して、GIF ファイルの特別に細工された画像記述子で、任意のコードを実行する可能性があります。
    (CVE-2015-3663)

  -「alis」アトムの処理でユーザー指定の入力の検証が適切でないため、オーバーフローの状態が存在します。An attacker can exploit this, with a specially crafted file, to cause a stack-based buffer overflow, resulting in a denial of service condition or the execution of arbitrary code. (CVE-2015-3664)

  - 動画ファイルのオブジェクトプロパティを処理する際、use-after-free エラーが存在します。An attacker can exploit this, with a specially crafted movie file, to dereference already freed memory, potentially resulting in the execution of arbitrary code. (CVE-2015-3665)

  -「minf」（メディア情報）アトム内で「code」アトムを処理する際のユーザー指定の入力の検証が不適切なため、メモリ破損の欠陥が存在します。
    An attacker can exploit this, with a specially crafted file, to corrupt memory, potentially resulting in the execution of arbitrary code. (CVE-2015-3666)

  -「stbl」アトムを処理する際、QuickTimeMPEG4!0x147f0() 関数に user-after-free エラーが存在します。An attacker can exploit this, with a specially crafted .MOV file, to dereference already freed memory, potentially resulting in the execution of arbitrary code. (CVE-2015-3667)

  - 動画ファイルを処理する際、ユーザー指定の入力の検証が不適切なため、メモリ破損の欠陥が存在します。An attacker can exploit this, with a specially crafted file, to corrupt memory, potentially resulting in the execution of arbitrary code. (CVE-2015-3668)

  - ユーザー入力の検証が適切でないため、オーバーフローの条件が存在します。An attacker can exploit this, with a specially crafted SGI file, to cause a heap-based buffer overflow, potentially resulting in the execution of arbitrary code. (CVE-2015-3669)

遠端 Windows 主機上安裝的 Apple QuickTime 版本比 7.7.7 舊。因此，會受到多個弱點影響：

- 存在一個任意程式碼執行弱點，這是因為不當驗證使用者提供的輸入所致。攻擊者可加以惡意利用，透過 SGI 檔案中特製的影像資料，執行任意程式碼。(CVE-2015-3661)

- 存在一個任意程式碼執行弱點，造成此弱點的原因是不當驗證使用者輸入所導致的超出邊界寫入瑕疵。攻擊者可加以惡意利用，透過 GIF 檔案中特製的影像資料，執行任意程式碼。(CVE-2015-3662)

- 存在一個任意程式碼執行弱點，造成此弱點的原因是不當驗證使用者輸入所導致的超出邊界寫入瑕疵。攻擊者可加以惡意利用，透過 GIF 檔案中特製的影像描述符號，執行任意程式碼。
 (CVE-2015-3663)

- 存在一個溢位情況，這是因為處理 ‘alis’ atom 時，不當驗證使用者提供的輸入所致。攻擊者可加以惡意利用，透過特製的檔案，造成堆疊型緩衝區溢位，進而導致拒絕服務情形或執行任意程式碼。(CVE-2015-3664)

- 處理影片檔案中的物件屬性時，存在一個釋放後使用錯誤。攻擊者可加以惡意利用，透過特製的影片檔案，解除參照已經釋放的記憶體，進而可能導致執行任意程式碼。(CVE-2015-3665)

- 存在一個記憶體損毀瑕疵，這是因為在 ‘minf’ (媒體資訊) atom 內處理處理 ‘code’ atom 時，不當驗證使用者提供的輸入所致。
 攻擊者可加以惡意利用，以特製的檔案損毀記憶體，進而可能導致執行任意程式碼。(CVE-2015-3666)

- 處理 ‘stbl’ atom 時，在 QuickTimeMPEG4!0x147f0() 函式中存在一個釋放後使用錯誤。攻擊者可惡意利用此錯誤，透過特製的.MOV 檔案，解除參照已經釋放的記憶體，進而可能導致執行任意程式碼。(CVE-2015-3667)

- 存在一個記憶體損毀瑕疵，這是因為在處理電影檔案時不當驗證使用者提供的輸入所致。攻擊者可加以惡意利用，以特製的檔案損毀記憶體，進而可能導致執行任意程式碼。(CVE-2015-3668)

- 存在溢位情況，這是使用者提供之輸入的不當驗證所致。攻擊者可加以惡意利用，透過特製的 SGI 檔案，造成堆積型緩衝區溢位，進而可能導致任意程式碼執行。(CVE-2015-3669)

远程 Windows 主机上安装的 Apple QuickTime 版本低于 7.7.7。因此，它受到多种漏洞的影响：

- 由于未正确验证用户提供的输入，因此存在任意代码执行漏洞。攻击者可利用此漏洞，通过 SGI 文件中特别构建的图像数据执行任意代码。(CVE-2015-3661)

- 由于未正确验证用户提供的输入造成越界写入缺陷，因而存在任意代码执行漏洞。攻击者可利用此漏洞，通过 GIF 文件中特别构建的图像数据执行任意代码。(CVE-2015-3662)

- 由于未正确验证用户提供的输入造成越界写入缺陷，因而存在任意代码执行漏洞。攻击者可利用此漏洞，通过 GIF 文件中特别构建的图像描述符执行任意代码。
 (CVE-2015-3663)

- 存在溢出情况，原因是在处理“alis”原子时未正确验证用户提供的输入。攻击者可以利用此问题，通过特别构建的文件造成基于堆栈的缓冲区溢出，从而导致拒绝服务情况或任意代码执行。(CVE-2015-3664)

- 在处理电影文件中的对象属性时存在释放后使用错误。远程攻击者可利用此问题，通过特别构建的电影文件取消引用已释放的内存，可能导致执行任意代码。(CVE-2015-3665)

- 存在内存损坏缺陷，原因是在处理“minf”（媒体信息）原子中的“code”原子时未正确验证用户提供的输入。
 远程攻击者可利用此问题，通过特别构建的文件造成内存损坏，可能导致执行任意代码。(CVE-2015-3666)

- 在处理“stbl”原子时，QuickTimeMPEG4!0x147f0() 函数中存在释放后使用错误。攻击者可利用此问题，通过特别构建的 .MOV 文件取消引用已释放的内存，可能导致执行任意代码。(CVE-2015-3667)

- 由于处理电影文件时未正确验证用户提供的输入，因此存在内存损坏缺陷。远程攻击者可利用此问题，通过特别构建的文件造成内存损坏，可能导致执行任意代码。(CVE-2015-3668)

- 由于对用户提供的输入验证不当，存在溢出情况。攻击者可利用此问题，通过特别构建的 SGI 文件造成基于堆的缓冲区溢出，可能导致执行任意代码。(CVE-2015-3669)

Versions of QuickTime older than 7.7.7 are affected by the following vulnerabilities :

  - A flaw is triggered as user-supplied input is not properly validated when handling specially crafted image data in an SGI file allowing a context-dependent attacker to potentially execute arbitrary code. (CVE-2015-3661) 
 - An out-of-bounds write flaw is triggered as user-supplied input is not properly validated when handling specially crafted image data in a GIF file allowing a context-dependent attacker to potentially execute arbitrary code. (CVE-2015-3662, CVE-2015-3663) 
 - An overflow condition is triggered as user-supplied input is not properly validated when handling alis atoms. With a specially crafted file, a context-dependent attacker can cause a stack-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. (CVE-2015-3664) 
 - A use-after-free error is triggered when handling object properties in a specially crafted movie file allowing a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code. (CVE-2015-3665) 
 - A flaw is triggered as user-supplied input is not properly validated when handling the code atom within the Media Information (minf) atom allowing a context-dependent attacker to use a specially crafted file to corrupt memory and potentially execute arbitrary code. (CVE-2015-3666) 
 - A use-after-free error in the 'QuickTimeMPEG4!0x147f0()' function is triggered when an out-of-bounds read error occurs during the handling of stbl ataoms. With a specially crafted movie (.MOV) file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code. (CVE-2015-3667) 
 - A flaw is triggered as user-supplied input is not properly validated when handling a specially crafted track fragment's 'size' field inside a moof atom allowing a context-dependent attacker to cause a heap-based buffer overflow and potentially execute arbitrary code. (CVE-2015-3668) 
 - An overflow condition is triggered as user-supplied input is not properly validated. With a specially crafted SGI file, a context-dependent attacker can cause a heap-based buffer overflow, potentially allowing the execution of arbitrary code. (CVE-2015-3669)

ID	名稱	產品	系列	已發布	已更新	嚴重性
84505	Apple QuickTime < 7.7.7 Multiple Vulnerabilities (Windows)	Nessus	Windows	2015/7/3	2019/11/22	medium
84505	Apple QuickTime < 7.7.7 複数の脆弱性（Windows）	Nessus	Windows	2015/7/3	2019/11/22	medium
84505	Apple QuickTime < 7.7.7 多個弱點 (Windows)	Nessus	Windows	2015/7/3	2019/11/22	medium
84505	Apple QuickTime < 7.7.7 多种漏洞 (Windows)	Nessus	Windows	2015/7/3	2019/11/22	medium
9304	Apple QuickTime < 7.7.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2016/4/20	2019/3/6	critical

偵測

搜尋 Plugin

medium

medium

medium

medium

critical