The version of QuickTime installed on the remote Mac OS X host is older than 7.5.5.  Such versions contain several vulnerabilities :

  - Heap and stack-based buffer overflows in the handling of     panorama atoms in QTVR (QuickTime Virtual Reality)     movie files could lead to an application crash or     arbitrary code execution (CVE-2008-3624 and     CVE-2008-3625).

  - A memory corruption issue in QuickTime's handling of     STSZ atoms in movie files could lead to an     application crash or arbitrary code execution     (CVE-2008-3626).

  - Multiple memory corruption issues in QuickTime's     handling of H.264-encoded movie files could lead to     an application crash or arbitrary code execution     (CVE-2008-3627).

  - An out-of-bounds read issue in QuickTime's handling     of PICT images could lead to an application crash     (CVE-2008-3629).

The version of QuickTime installed on the remote Windows host is older than 7.5.5.  Such versions contain several vulnerabilities :

  - An integer overflow in QuickTime's handling of PICT     images may lead to an application crash or arbitrary     code execution (CVE-2008-3614).

  - An uninitialized memory access issue in the third-     party Indeo v5 codec, which does not ship with     QuickTime, may lead to an application crash or arbitrary     code execution (CVE-2008-3615).

  - Heap and stack-based buffer overflows in the handling of     panorama atoms in QTVR (QuickTime Virtual Reality)     movie files could lead to an application crash or     arbitrary code execution (CVE-2008-3624 and     CVE-2008-3625).

  - A memory corruption issue in QuickTime's handling of     STSZ atoms in movie files could lead to an     application crash or arbitrary code execution     (CVE-2008-3626).

  - Multiple memory corruption issues in QuickTime's     handling of H.264-encoded movie files could lead to     an application crash or arbitrary code execution     (CVE-2008-3627).

  - An invalid pointer issue in QuickTime's handling of     PICT images could lead to an application crash or     arbitrary code execution (CVE-2008-3628).

  - An out-of-bounds read issue in QuickTime's handling     of PICT images could lead to an application crash     (CVE-2008-3629).

  - A stack-based buffer overflow exists in the third-party     Indeo v3.2 codec for QuickTime, which could lead to an     application crash or arbitrary code execution when     viewing a specially crafted movie file (CVE-2008-3635).

The version of QuickTime installed on the remote host is older than 7.5.5.  Such versions contain several vulnerabilities :

  - Heap and stack buffer overflows in the handling of panorama atoms in QTVR (QuickTime Virtual Reality) movie files could lead to an application crash or arbitrary code execution (CVE-2008-3624 and CVE-2008-3625).
  - A memory corruption issue in QuickTime's handling of STSZ atoms in movie files could lead to an application crash or arbitrary code execution (CVE-2008-3626).
  - Multiple memory corruption issues in QuickTime's handling of H.264-encoded movie files could lead to an application crash or arbitrary code execution (CVE-2008-3627).
  - An out-of-bounds read issue in QuickTime's handling of PICT images could lead to an application crash (CVE-2008-3629).

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.5.  Mac OS X 10.5.5 contains security fixes for a number of programs.

ID	Name	Product	Family	Published	Updated	Severity
34118	QuickTime < 7.5.5 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	9/10/2008	7/14/2018	high
34119	QuickTime < 7.5.5 Multiple Vulnerabilities (Windows)	Nessus	Windows	9/10/2008	7/25/2018	high
801188	QuickTime < 7.5.5 Multiple Vulnerabilities	Log Correlation Engine	Web Clients			high
4651	QuickTime < 7.5.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	9/10/2008	3/6/2019	medium
4682	Mac OS X < 10.5.5 Multiple Vulnerabilities	Nessus Network Monitor	Generic	9/16/2008	3/6/2019	critical

Detections

Analytics

Plugins Search

high

high

high

medium

critical