The version of QuickTime installed on the remote Windows host is older than 7.7.  As such, it reportedly may be affected by the following vulnerabilities :

  - A buffer overflow in QuickTime's handling of pict files     may lead to an application crash or arbitrary code     execution. (CVE-2011-0245)

  - A buffer overflow in QuickTime's handling of JPEG2000     files may lead to an application crash or arbitrary     code execution. (CVE-2011-0186)

  - A cross-origin issue in QuickTime plug-in's handling of     cross-site redirects may lead to disclosure of video     data from another site. (CVE-2011-0187)

  - An integer overflow in QuickTime's handling of RIFF WAV     files may lead to an application crash or arbitrary     code execution. (CVE-2011-0209)

  - A memory corruption issue in QuickTime's handling of     sample tables in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0210)

  - An integer overflow in QuickTime's handling of audio     channels in movie files may lead to an application     crash or arbitrary code execution. (CVE-2011-0211)

  - A buffer overflow in QuickTime's handling of JPEG files     may lead to an application crash or arbitrary code     execution. (CVE-2011-0213)

  - A heap-based buffer overflow in QuickTime's handling of     GIF files may lead to an application crash or arbitrary     code execution. (CVE-2011-0246)

  - Multiple stack-based buffer overflows in QuickTime's     handling of H.264 encoded movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0247)

  - A stack-based buffer overflow in the QuickTime ActiveX's     handling of QTL files may lead to an application crash     or arbitrary code execution. (CVE-2011-0248)

  - A heap-based buffer overflow in QuickTime's handling of     STSC atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0249)

  - A heap-based buffer overflow in QuickTime's handling of     STSS atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0250)

  - A heap-based buffer overflow in QuickTime's handling of     STSZ atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0251)

  - A heap-based buffer overflow in QuickTime's handling of     STTS atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0252)

  - A stack-based buffer overflow in QuickTime's handling of     PICT files may lead to an application crash or arbitrary     code execution. (CVE-2011-0257)

  - An integer overflow in QuickTime's handling of track run     atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0256)

  - Memory corruption in Quicktime's handling of mp4v codec     information. (CVE-2011-0258)

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.7.

Mac OS X 10.6.7 contains security fixes for the following products :

  - AirPort
  - Apache
  - AppleScript
  - ATS
  - bzip2
  - CarbonCore
  - ClamAV
  - CoreText
  - File Quarantine
  - HFS
  - ImageIO
  - Image RAW
  - Installer
  - Kerberos
  - Kernel
  - Libinfo
  - libxml
  - Mailman
  - PHP
  - QuickLook
  - QuickTime
  - Ruby
  - Samba
  - Subversion
  - Terminal
  - X11

The version of QuickTime installed on the remote Mac OS X host is older than 7.7.  As such, it reportedly may be affected by the following vulnerabilities :

  - A buffer overflow in QuickTime's handling of pict files     may lead to an application crash or arbitrary code     execution. (CVE-2011-0245)

  - A buffer overflow in QuickTime's handling of JPEG2000     files may lead to an application crash or arbitrary     code execution. (CVE-2011-0186)

  - A cross-origin issue in QuickTime plug-in's handling of     cross-site redirects may lead to disclosure of video     data from another site. (CVE-2011-0187)

  - An integer overflow in QuickTime's handling of RIFF WAV     files may lead to an application crash or arbitrary     code execution. (CVE-2011-0209)

  - A memory corruption issue in QuickTime's handling of     sample tables in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0210)

  - An integer overflow in QuickTime's handling of audio     channels in movie files may lead to an application     crash or arbitrary code execution. (CVE-2011-0211)

  - A buffer overflow in QuickTime's handling of JPEG files     may lead to an application crash or arbitrary code     execution. (CVE-2011-0213)

  - A heap-based buffer overflow in QuickTime's handling of     STSC atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0249)

  - A heap-based buffer overflow in QuickTime's handling of     STSS atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0250)

  - A heap-based buffer overflow in QuickTime's handling of     STSZ atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0251)

  - A heap-based buffer overflow in QuickTime's handling of     STTS atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0252)

  - A stack-based buffer overflow in QuickTime's handling of     PICT files may lead to an application crash or arbitrary     code execution. (CVE-2011-0257)

  - An integer overflow in QuickTime's handling of track run     atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2011-0256)

Versions of QuickTime earlier than 7.7 are potentially affected by multiple vulnerabilities :

  - A buffer overflow in QuickTime's handling of pict files may lead to an application crash or arbitrary code execution. (CVE-2011-0245)

  - A buffer overflow in QuickTime's handling of JPEG2000 files may lead to an application crash or arbitrary code execution. (CVE-2011-0186)

  - A cross-origin issue in QuickTime plug-in's handling of cross-site redirects may lead to disclosure of video data from another site. (CVE-2011-0187)

  - An integer overflow in QuickTime's handling of RIFF WAV files may lead to an application crash or arbitrary code execution. (CVE-2011-0209)

  - A memory corruption issue in QuickTime's handling of sample tables in QuickTime movie files may lead to an application crash or arbitrary code execution. (CVE-2011-0210)

  - An integer overflow in QuickTime's handling of audio channels in movie files may lead to an application crash or arbitrary code execution. (CVE-2011-0211)

  - A buffer overflow in QuickTime's handling of JPEG files may lead to an application crash or arbitrary code execution. (CVE-2011-0213)

  - A heap buffer overflow in QuickTime's handling of GIF files may lead to an application crash or arbitrary code execution. (CVE-2011-0246)

  - Multiple stack buffer overflows in QuickTime's handling of H.264 encoded movie files may lead to an application crash or arbitrary code execution. (CVE-2011-0247)

  - A stack buffer overflow in QuickTime ActiveX's handling of QTL files may lead to an application crash or arbitrary code execution. (CVE-2011-0248)

  - A heap buffer overflow in QuickTime's handling of STSC atoms in QuickTime movie files may lead to an application crash or arbitrary code execution. (CVE-2011-0249)

  - A heap buffer overflow in QuickTime's handling of STSS atoms in QuickTime movie files may lead to an application crash or arbitrary code execution. (CVE-2011-0250)

  - A heap buffer overflow in QuickTime's handling of STSZ atoms in QuickTime movie files may lead to an application crash or arbitrary code execution. (CVE-2011-0251)

  - A heap buffer overflow in QuickTime's handling of STTS atoms in QuickTime movie files may lead to an application crash or arbitrary code execution. (CVE-2011-0252)

Versions of Mac OS X 10.6 earlier than 10.6.7 are potentially affected by a security issue.  Mac OS X 10.6.7 contains a security fix for the following products :

  - Airport

  - Apache

  - AppleScript

  - ATS

  - bzip2

  - CarbonCore

  - ClamAV

  - CoreText

  - HFS

  - ImageIO

  - Image RAW

  - Installer

  - Kerberos

  - Kernel

  - Libinfo

  - libxml

  - Mailman

  - PHP

  - QuickLook

  - QuickTime

  - Ruby

  - Samba

  - Subversion

  - Terminal

  - X11

Versions of Mac OS X 10.6 earlier than 10.6.7 are potentially affected by a security issue.  Mac OS X 10.6.7 contains a security fix for the following products :

  - Airport

  - Apache

  - AppleScript

  - ATS

  - bzip2

  - CarbonCore

  - ClamAV

  - CoreText

  - HFS

  - ImageIO

  - Image RAW

  - Installer

  - Kerberos

  - Kernel

  - Libinfo

  - libxml

  - Mailman

  - PHP

  - QuickLook

  - QuickTime

  - Ruby

  - Samba

  - Subversion

  - Terminal

  - X11
IAVB Reference : 2010-B-0083
STIG Finding Severity : Category II

ID	Name	Product	Family	Published	Updated	Severity
55764	QuickTime < 7.7 Multiple Vulnerabilities (Windows)	Nessus	Windows	8/4/2011	11/15/2018	high
52754	Mac OS X 10.6.x < 10.6.7 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	3/22/2011	5/28/2024	high
55763	QuickTime < 7.7 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	8/4/2011	7/14/2018	high
6000	QuickTime < 7.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	8/4/2011	3/6/2019	high
5826	Mac OS X 10.6 < 10.6.7 Multiple Vulnerabilities	Nessus Network Monitor	Generic	3/21/2011	3/6/2019	critical
800796	Mac OS X 10.6 < 10.6.7 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection	3/21/2011		high
801184	QuickTime < 7.7 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	8/4/2011		high

Detections

Analytics

Plugins Search

high

high

high

high

critical

high

high