Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file with Image Descriptor (IDSC) atoms containing an invalid atom size, which triggers memory corruption.

 The version of QuickTime installed on the remote host is older than 7.4.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if a user opens a specially-crafted movie or PICT file with QuickTime.

The version of QuickTime installed on the remote Mac OS X host is older than 7.4.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted movie or PICT file file with QuickTime.

The version of QuickTime installed on the remote Windows host is older than 7.4.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted movie or PICT file file with QuickTime.

The version of QuickTime installed on the remote host is older than 7.4.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if a user opens a specially-crafted movie or PICT file with QuickTime.

ID	Name	Product	Family	Severity
4344	QuickTime < 7.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
29983	QuickTime < 7.4 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	high
29982	QuickTime < 7.4 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
801187	QuickTime < 7.4 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2008-0033

critical

Tenable Plugins

medium

high

high

high