Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.

The version of QuickTime installed on the remote Windows host is older than 7.2.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially-crafted file with QuickTime.

The version of QuickTime installed on the remote Mac OS X host is older than 7.2.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted file with QuickTime.

ID	Name	Product	Family	Severity
4132	QuickTime < 7.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
25704	QuickTime < 7.2 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	high
801206	QuickTime < 7.2 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2007-2394

high

Tenable Plugins

medium

high

high