Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor (STSD) atom size in a QuickTime movie.

The remote Windows host is running a version of QuickTime prior to 7.1.3. 

The remote version of QuickTime is vulnerable to various integer and buffer overflows involving specially crafted image and media files. An attacker may be able to leverage these issues to execute arbitrary code on the remote host by sending a malformed file to a victim and having him open it using QuickTime player.

The remote version of Quicktime is vulnerable to various buffer overflows involving specially-crafted media files.  An attacker may be able to leverage these issues to execute arbitrary code on the remote host by sending a malformed file to a victim and having them open it using QuickTime player.

ID	Name	Product	Family	Severity
22336	QuickTime < 7.1.3 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
3741	Quicktime < 7.1.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
801208	Quicktime < 7.1.3 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2007-0754

high

Tenable Plugins

high

medium

high