Apple QuickTime before 7.0.3 allows user-assisted attackers to overwrite memory and execute arbitrary code via a crafted PICT file that triggers an overflow during expansion.

The remote Windows host is running a version of Quicktime 7 that is older than Quicktime 7.0.3.  This version is vulnerable to various buffer overflows that may allow an attacker to execute arbitrary code on the remote host by sending a malformed file to a victim and have him open it using QuickTime player. 

The remote Windows host is running a version of QuickTime that is older than QuickTime 7.0.3. 

The remote version of this software is reportedly vulnerable to various buffer overflows that may allow an attacker to execute arbitrary code on the remote host by sending a malformed file to a victim and have him open it using QuickTime player.

The remote Mac OS X host is running a version of Quicktime 7 which is older than Quicktime 7.0.3.

The remote version of this software is vulnerable to various buffer overflows which may allow an attacker to execute arbitrary code on the remote host by sending a malformed file to a victim and have him open it using QuickTime player.

ID	Name	Product	Family	Type	Severity
3280	Quicktime < 7.0.3 (Windows) Detection	Nessus Network Monitor	Web Clients		high
20136	QuickTime < 7.0.3 Multiple Vulnerabilities (Windows)	Nessus	Windows	Local	high
20135	Quicktime < 7.0.3 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	medium

Detections

Analytics

CVE-2005-2756

high

Tenable Plugins

high

high

medium