Detections
Analytics
QuickTime < 7.1.5 Multiple Vulnerabilities
medium Nessus Network Monitor Plugin ID 3935
Synopsis
The remote Windows host contains an application that is prone to multiple attacks.Description
According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows. An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially-crafted file to a victim and having him open it using QuickTime.Solution
Upgrade to version 7.1.5 or higher.See Also
http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html
Plugin Details
Severity: Medium
ID: 3935
Family: Web Clients
Published: 3/6/2007
Updated: 3/6/2019
Nessus ID: 24761
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 5.4
Temporal Score: 4.2
Vector: CVSS2#AV:A/AC:M/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.5
Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:apple:quicktime
Reference Information
CVE: CVE-2007-0711, CVE-2007-0712, CVE-2007-0713, CVE-2007-0714, CVE-2007-0715, CVE-2007-0716, CVE-2007-0717, CVE-2007-0718