Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

According to its banner, the remote Apple TV 2nd generation or later device is prior to 6.0.  It is, therefore, reportedly affected by multiple vulnerabilities, the most serious issues of which could result in arbitrary code execution.

The mobile device is running a version of iOS that is older than version 7.  This version contains security-related fixes for the following components :

  - Certificate Trust Policy
  - CoreGraphics
  - CoreMedia
  - Data Protection
  - Data Security
  - dyld
  - File Systems
  - ImageIO
  - IOKit
  - IOKitUser
  - IOSerialFamily
  - IPSec
  - Kernel
  - Kext Management
  - libxml
  - libxslt
  - Passcode Lock
  - Personal Hotspot
  - Push Notifications
  - Safari
  - Sandbox
  - Social
  - Springboard
  - Telephony
  - Twitter
  - WebKit

The remote host is running a version of Mac OS X 10.6, 10.7, or 10.8 that does not have Security Update 2013-003 applied.  This update contains several security-related fixes for the following component :

  - QuickTime

Successful exploitation of these issues could result in arbitrary code execution.

The version of QuickTime installed on the remote Windows host is older than 7.7.4.  It is, therefore, reportedly affected by the following vulnerabilities :

  - Buffer overflow vulnerabilities exist in the handling of     'dref' atoms, 'enof' atoms, 'mvhd' atoms, FPX files, MP3     files, H.263 and H.264 encoded movie files, Sorenson     encoded movie files, and  JPEG encoded data.
    (CVE-2013-0986, CVE-2013-0988, CVE-2013-0989,     CVE-2013-1016, CVE-2013-1017, CVE-2013-1018,     CVE-2013-1019, CVE-2013-1021, CVE-2013-1022)

  - Memory corruption vulnerabilities exist in the handling     of QTIF files, TeXML files, and JPEG encoded data.
    (CVE-2013-0987, CVE-2013-1015, CVE-2013-1020)

Successful exploitation of these issues could result in program termination or arbitrary code execution, subject to the user's privileges.

Versions of QuickTime earlier than 7.7.4 are affected by the following vulnerabilities :

  - A buffer overflow existed in the handling of 'enof' atoms. (CVE-2013-0986)

  - A memory corruption issue existed in the handling of QTIF files. (CVE-2013-0987)

  - A buffer overflow existed in the handling of FPX files. (CVE-2013-0988)

  - A buffer overflow existed in the handling of MP3 files. (CVE-2013-0989)

  - A memory corruption issue existed in the handling of TeXML files. (CVE-2013-1015)

  - A buffer overflow existed in the handling of H.263 encoded movie files. (CVE-2013-1016)

  - A buffer overflow existed in the handling of 'dref' atoms. (CVE-2013-1017)

  - A buffer overflow existed in the handling of H.264 encoded movie files. (CVE-2013-1018)

  - A buffer overflow existed in the handling of Sorenson encoded movie files.  (CVE-2013-1019)

  - A memory corruption issue existed in the handling of JPEG encoded data. (CVE-2013-1020)

  - A buffer overflow existed in the handling of JPEG encoded data. (CVE-2013-1021)

  - A buffer underflow existed in the handling of 'mvhd' atoms.  (CVE-2013-1022)

Successful exploitation of these issues could result in program termination or arbitrary code execution, subject to the user's privileges

According to its banner, the remote Apple iOS device is missing a security update.  Versions of Apple iOS older than 7.0 are affected by vulnerabilities within the following components :

 - Certificate Trust Policy
 - CoreGraphics
 - CoreMedia
 - Data Protection
 - Data Security
 - File Systems
 - IOKit
 - IOKitUser
 - IOSerialFamily
 - IPSec
 - ImageIO
 - Kernel
 - Kext Management
 - Passcode Lock
 - Personal Hotspot
 - Push Notifications
 - Safari
 - Sandbox
 - Social
 - Springboard
 - Telephony
 - Twitter
 - WebKit
 - dyld
 - libxml
 - libxslt

ID	Name	Product	Family	Severity
70257	Apple TV < 6.0 Multiple Vulnerabilities	Nessus	Misc.	high
69984	Apple iOS < 7 Multiple Vulnerabilities	Nessus	Mobile Devices	high
67130	Mac OS X Multiple Vulnerabilities (Security Update 2013-003)	Nessus	MacOS X Local Security Checks	high
66636	QuickTime < 7.7.4 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
801190	QuickTime < 7.7.4 Multiple Vulnerabilities (Windows)	Log Correlation Engine	Web Clients	high
6840	QuickTime < 7.7.4 Multiple Vulnerabilities (Windows) (deprecated)	Nessus Network Monitor	Web Clients	high
8013	Apple iOS < 7.0 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	critical

Detections

Analytics

CVE-2013-1019

high

Tenable Plugins

high

high

high

high

high

high

critical