Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PICT file.

According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows.  An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially-crafted file to a victim and having him open it using QuickTime.

According to its version, the installation of Quicktime on the remote Mac OS X host is affected by multiple buffer overflows.  An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially crafted file to a victim and having him open it using QuickTime.

According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows.  An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially crafted file to a victim and having him open it using QuickTime.

ID	Name	Product	Family	Severity
3935	QuickTime < 7.1.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
24762	Quicktime < 7.1.5 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	high
24761	QuickTime < 7.1.5 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
801192	QuickTime < 7.1.5 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2007-0715

high

Tenable Plugins

medium

high

high

high