Detections
Analytics
Quicktime < 7.0.3 (Windows) Detection
high Nessus Network Monitor Plugin ID 3280
Synopsis
The remote host is vulnerable to a buffer overflow.Description
The remote Windows host is running a version of Quicktime 7 that is older than Quicktime 7.0.3. This version is vulnerable to various buffer overflows that may allow an attacker to execute arbitrary code on the remote host by sending a malformed file to a victim and have him open it using QuickTime player.Solution
Upgrade to version 7.0.3 or higher.See Also
Plugin Details
Severity: High
ID: 3280
Family: Web Clients
Published: 11/7/2005
Updated: 3/6/2019
Nessus ID: 20136
Risk Information
VPR
Risk Factor: Medium
Score: 5.5
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.1
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:apple:quicktime
Reference Information
CVE: CVE-2005-2753, CVE-2005-2754, CVE-2005-2755, CVE-2005-2756