The version of QuickTime installed on the remote Windows host is older than 7.7.4.  It is, therefore, reportedly affected by the following vulnerabilities :

  - Buffer overflow vulnerabilities exist in the handling of     'dref' atoms, 'enof' atoms, 'mvhd' atoms, FPX files, MP3     files, H.263 and H.264 encoded movie files, Sorenson     encoded movie files, and  JPEG encoded data.
    (CVE-2013-0986, CVE-2013-0988, CVE-2013-0989,     CVE-2013-1016, CVE-2013-1017, CVE-2013-1018,     CVE-2013-1019, CVE-2013-1021, CVE-2013-1022)

  - Memory corruption vulnerabilities exist in the handling     of QTIF files, TeXML files, and JPEG encoded data.
    (CVE-2013-0987, CVE-2013-1015, CVE-2013-1020)

Successful exploitation of these issues could result in program termination or arbitrary code execution, subject to the user's privileges.

The remote host is running a version of Mac OS X 10.6, 10.7, or 10.8 that does not have Security Update 2013-003 applied.  This update contains several security-related fixes for the following component :

  - QuickTime

Successful exploitation of these issues could result in arbitrary code execution.

The mobile device is running a version of iOS that is older than version 7.  This version contains security-related fixes for the following components :

  - Certificate Trust Policy
  - CoreGraphics
  - CoreMedia
  - Data Protection
  - Data Security
  - dyld
  - File Systems
  - ImageIO
  - IOKit
  - IOKitUser
  - IOSerialFamily
  - IPSec
  - Kernel
  - Kext Management
  - libxml
  - libxslt
  - Passcode Lock
  - Personal Hotspot
  - Push Notifications
  - Safari
  - Sandbox
  - Social
  - Springboard
  - Telephony
  - Twitter
  - WebKit

According to its banner, the remote Apple TV 2nd generation or later device is prior to 6.0.  It is, therefore, reportedly affected by multiple vulnerabilities, the most serious issues of which could result in arbitrary code execution.

Versions of QuickTime earlier than 7.7.4 are affected by the following vulnerabilities :

  - A buffer overflow existed in the handling of 'enof' atoms. (CVE-2013-0986)

  - A memory corruption issue existed in the handling of QTIF files. (CVE-2013-0987)

  - A buffer overflow existed in the handling of FPX files. (CVE-2013-0988)

  - A buffer overflow existed in the handling of MP3 files. (CVE-2013-0989)

  - A memory corruption issue existed in the handling of TeXML files. (CVE-2013-1015)

  - A buffer overflow existed in the handling of H.263 encoded movie files. (CVE-2013-1016)

  - A buffer overflow existed in the handling of 'dref' atoms. (CVE-2013-1017)

  - A buffer overflow existed in the handling of H.264 encoded movie files. (CVE-2013-1018)

  - A buffer overflow existed in the handling of Sorenson encoded movie files.  (CVE-2013-1019)

  - A memory corruption issue existed in the handling of JPEG encoded data. (CVE-2013-1020)

  - A buffer overflow existed in the handling of JPEG encoded data. (CVE-2013-1021)

  - A buffer underflow existed in the handling of 'mvhd' atoms.  (CVE-2013-1022)

Successful exploitation of these issues could result in program termination or arbitrary code execution, subject to the user's privileges

According to its banner, the remote Apple iOS device is missing a security update.  Versions of Apple iOS older than 7.0 are affected by vulnerabilities within the following components :

 - Certificate Trust Policy
 - CoreGraphics
 - CoreMedia
 - Data Protection
 - Data Security
 - File Systems
 - IOKit
 - IOKitUser
 - IOSerialFamily
 - IPSec
 - ImageIO
 - Kernel
 - Kext Management
 - Passcode Lock
 - Personal Hotspot
 - Push Notifications
 - Safari
 - Sandbox
 - Social
 - Springboard
 - Telephony
 - Twitter
 - WebKit
 - dyld
 - libxml
 - libxslt

ID	Name	Product	Family	Published	Updated	Severity
66636	QuickTime < 7.7.4 Multiple Vulnerabilities (Windows)	Nessus	Windows	5/28/2013	11/15/2018	high
67130	Mac OS X Multiple Vulnerabilities (Security Update 2013-003)	Nessus	MacOS X Local Security Checks	7/2/2013	5/28/2024	high
69984	Apple iOS < 7 Multiple Vulnerabilities	Nessus	Mobile Devices	9/19/2013	9/4/2024	high
70257	Apple TV < 6.0 Multiple Vulnerabilities	Nessus	Misc.	10/1/2013	11/27/2019	high
6840	QuickTime < 7.7.4 Multiple Vulnerabilities (Windows) (deprecated)	Nessus Network Monitor	Web Clients	5/23/2013	3/6/2019	high
8013	Apple iOS < 7.0 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	9/20/2011	3/6/2019	critical
801190	QuickTime < 7.7.4 Multiple Vulnerabilities (Windows)	Log Correlation Engine	Web Clients	5/23/2013		high

Detections

Analytics

Plugins Search

high

high

high

high

high

critical

high