Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service (crash) via a crafted file with a missing movie attribute, which leads to a null dereference.

The remote Windows host is running a version of Quicktime 7 that is older than Quicktime 7.0.3.  This version is vulnerable to various buffer overflows that may allow an attacker to execute arbitrary code on the remote host by sending a malformed file to a victim and have him open it using QuickTime player. 

The remote Windows host is running a version of QuickTime that is older than QuickTime 7.0.3. 

The remote version of this software is reportedly vulnerable to various buffer overflows that may allow an attacker to execute arbitrary code on the remote host by sending a malformed file to a victim and have him open it using QuickTime player.

The remote Mac OS X host is running a version of Quicktime 7 which is older than Quicktime 7.0.3.

The remote version of this software is vulnerable to various buffer overflows which may allow an attacker to execute arbitrary code on the remote host by sending a malformed file to a victim and have him open it using QuickTime player.

ID	Name	Product	Family	Severity
3280	Quicktime < 7.0.3 (Windows) Detection	Nessus Network Monitor	Web Clients	high
20136	QuickTime < 7.0.3 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
20135	Quicktime < 7.0.3 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	medium

Detections

Analytics

CVE-2005-2755

medium

Tenable Plugins

high

high

medium