Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.

The remote host is affected by the vulnerability described in GLSA-200803-08 (Win32 binary codecs: Multiple vulnerabilities)

    Multiple buffer overflow, heap overflow, and integer overflow     vulnerabilities were discovered in the Quicktime plugin when processing     MOV, FLC, SGI, H.264 and FPX files.
  Impact :

    A remote attacker could entice a user to open a specially crafted video     file, possibly resulting in the remote execution of arbitrary code with     the privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

 The version of QuickTime installed on the remote host is older than 7.3.1.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if a user opens a specially-crafted RTSP movie, QTL file or Flash media file with QuickTime.

The version of QuickTime installed on the remote Mac OS X host is older than 7.3.1.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted RTSP movie, QTL file, or Flash media file with QuickTime.

The version of QuickTime installed on the remote Windows host is older than 7.3.1.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted RTSP movie, QTL file, or Flash media file with QuickTime.

ID	Name	Product	Family	Severity
31383	GLSA-200803-08 : Win32 binary codecs: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
4314	QuickTime < 7.3.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
29699	QuickTime < 7.3.1 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	high
29698	QuickTime < 7.3.1 Multiple Vulnerabilities (Windows)	Nessus	Windows	high

Detections

Analytics

CVE-2007-6166

critical

Tenable Plugins

high

high

high

high