Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in video files, which sends these URIs to explorer.exe and thereby allows remote attackers to execute arbitrary programs, as originally demonstrated by crafted file: URLs.

The version of QuickTime installed on the remote Mac OS X host is older than 7.5.  Such versions contain several vulnerabilities :

  - There is a heap-based buffer overflow in QuickTime's     handling of PICT image files that could result in a     program crash or arbitrary code execution     (CVE-2008-1583).

  - There is a memory corruption issue in QuickTime's     handling of AAC-encoded media content that could     result in a program crash or arbitrary code execution     (CVE-2008-1582).

  - There is a stack-based buffer overflow in QuickTime's     handling of Indeo video codec content that could     result in a program crash or arbitrary code execution     (CVE-2008-1584).

  - There is a URL handling issue in QuickTime's handling     of 'file:' URLs that may allow launching of arbitrary     applications (CVE-2008-1585).

The version of QuickTime installed on the remote Windows host is older than 7.5.  Such versions contain several vulnerabilities :

  - There are two heap-based buffer overflows in QuickTime's     handling of PICT image files that could result in a     program crash or arbitrary code execution     (CVE-2008-1581 and CVE-2008-1583).

  - There is a memory corruption issue in QuickTime's     handling of AAC-encoded media content that could     result in a program crash or arbitrary code execution     (CVE-2008-1582).

  - There is a stack-based buffer overflow in QuickTime's     handling of Indeo video codec content that could     result in a program crash or arbitrary code execution     (CVE-2008-1584).

  - There is a URL handling issue in QuickTime's handling     of 'file:' URLs that may allow launching of arbitrary     applications (CVE-2008-1585).

The version of QuickTime installed on the remote Mac OS X host is older than 7.5.  Such versions contain several vulnerabilities :

  - There is a heap buffer overflow in QuickTime's handling of PICT image files that could result in a program crash or arbitrary code execution (CVE-2008-1583).
  - There is a memory corruption issue in QuickTime's handling of AAC-encoded media content that could result in a program crash or arbitrary code execution (CVE-2008-1582).
  - There is a stack buffer overflow in QuickTime's handling of Indeo video codec content that could result in a program crash or arbitrary code execution (CVE-2008-1584).
  - There is a URL handling issue in QuickTime's handling of 'file:' URLs that may allow launching of arbitrary applications (CVE-2008-1585).

ID	Name	Product	Family	Severity
33131	QuickTime < 7.5 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	high
33130	QuickTime < 7.5 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
4537	QuickTime < 7.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
801189	QuickTime < 7.5 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2008-1585

high

Tenable Plugins

high

high

medium

high