Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL.

The version of QuickTime installed on the remote host is older than 7.6.  Such versions contain several vulnerabilities : 

  - A heap buffer overflow in QuickTime's handling of RTSP URLs may lead to an application crash or arbitrary code execution. (CVE-2009-0001)

  - A heap buffer overflow in QuickTime's handling of THKD atoms in QTVR (QuickTime Virtual Reality) movie files may lead to an application crash or arbitrary code execution. (CVE-2009-0002)

  - A heap buffer overflow while processing an AVI movie file may lead to an application crash or arbitrary code execution. (CVE-2009-0003)

  - A buffer overflow in the handling of MPEG-2 video files with MP3 audio content may lead to an application crash or arbitrary code execution. (CVE-2009-0004)

  - A memory corruption in QuickTime's handling of H.263 encoded movie files may lead to an application crash or arbitrary code execution. (CVE-2009-0005)

  - A signedness issue in QuickTime's handling of Cinepak encoded movie files may result in a heap buffer overflow. (CVE-2009-0006)

  - A heap buffer overflow in QuickTime's handling of JPEG atoms in QuickTime movie files may lead to an application crash or arbitrary code execution. (CVE-2009-0007)

The version of QuickTime installed on the remote Windows host is older than 7.6. Such versions contain several vulnerabilities :

  - A heap-based buffer overflow in QuickTime's handling of     RTSP URLs may lead to an application crash or arbitrary     code execution. (CVE-2009-0001)

  - A heap-based buffer overflow in QuickTime's handling of     THKD atoms in QTVR (QuickTime Virtual Reality) movie     file may lead to an application crash or arbitrary code     execution. (CVE-2009-0002)

  - A heap-based buffer overflow while processing an AVI     movie file may lead to an application crash or arbitrary     code execution. (CVE-2009-0003)

  - A buffer overflow in the handling of MPEG-2 video files     with MP3 audio content may lead to an application crash     or arbitrary code execution. (CVE-2009-0004)

  - A memory corruption in QuickTime's handling of H.263     encoded movie files may lead to an application crash or     arbitrary code execution. (CVE-2009-0005)

  - A signedness issue in QuickTime's handling of Cinepak     encoded movie files may result in a heap buffer     overflow. (CVE-2009-0006)

  - A heap-based buffer overflow in QuickTime's handling of     jpeg atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2009-0007)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.  Such versions contain several vulnerabilities :

  - A heap buffer overflow in QuickTime's handling of RTSP     URLs may lead to an application crash or arbitrary code     execution. (CVE-2009-0001)

  - A heap buffer overflow in QuickTime's handling of THKD     atoms in QTVR (QuickTime Virtual Reality) movie files     may lead to an application crash or arbitrary code     execution. (CVE-2009-0002)

  - A heap buffer overflow while processing an AVI movie     file may lead to an application crash or arbitrary code     execution. (CVE-2009-0003)

  - A buffer overflow in the handling of MPEG-2 video files     with MP3 audio content may lead to an application crash     or arbitrary code execution. (CVE-2009-0004)

  - A memory corruption in QuickTime's handling of H.263     encoded movie files may lead to an application crash or     arbitrary code execution. (CVE-2009-0005)

  - A signedness issue in QuickTime's handling of Cinepak     encoded movie files may result in a heap buffer     overflow. (CVE-2009-0006)

  - A heap buffer overflow in QuickTime's handling of jpeg     atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2009-0007)

ID	Name	Product	Family	Severity
4817	QuickTime < 7.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
35437	QuickTime < 7.6 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
35436	QuickTime < 7.6 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	high
801201	QuickTime < 7.6 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2009-0001

high

Tenable Plugins

medium

high

high

high