Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image.

The remote host is affected by the vulnerability described in GLSA-200803-08 (Win32 binary codecs: Multiple vulnerabilities)

    Multiple buffer overflow, heap overflow, and integer overflow     vulnerabilities were discovered in the Quicktime plugin when processing     MOV, FLC, SGI, H.264 and FPX files.
  Impact :

    A remote attacker could entice a user to open a specially crafted video     file, possibly resulting in the remote execution of arbitrary code with     the privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

The Apple Security Team reports that there are multiple vulnerabilities within QuickTime (one of the plugins for win32-codecs). A remote attacker capable of creating a malicious SGI image, FlashPix, FLC movie, or a QuickTime movie can possibly lead to execution of arbitrary code or cause a Denial of Service (application crash).

Users who have QuickTime (/win32-codecs) as a browser plugin may be vulnerable to remote code execution by visiting a website containing a malicious SGI image, FlashPix, FLC movie or a QuickTime movie.

The remote Windows host is running a version of QuickTime prior to 7.1.3. 

The remote version of QuickTime is vulnerable to various integer and buffer overflows involving specially crafted image and media files. An attacker may be able to leverage these issues to execute arbitrary code on the remote host by sending a malformed file to a victim and having him open it using QuickTime player.

The remote Mac OS X host is running a version of Quicktime prior to 7.1.3. 

The remote version of Quicktime is vulnerable to various integer and buffer overflows involving specially crafted image and media files. An attacker may be able to leverage these issues to execute arbitrary code on the remote host by sending a malformed file to a victim and having him open it using QuickTime player.

The remote version of Quicktime is vulnerable to various buffer overflows involving specially-crafted media files.  An attacker may be able to leverage these issues to execute arbitrary code on the remote host by sending a malformed file to a victim and having them open it using QuickTime player.

ID	Name	Product	Family	Severity
31383	GLSA-200803-08 : Win32 binary codecs: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
22885	FreeBSD : win32-codecs -- multiple vulnerabilities (24f6b1eb-43d5-11db-81e1-000e0c2e438a)	Nessus	FreeBSD Local Security Checks	medium
22336	QuickTime < 7.1.3 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
22335	Quicktime < 7.1.3 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	medium
3741	Quicktime < 7.1.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
801208	Quicktime < 7.1.3 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2006-4385

high

Tenable Plugins

high

medium

high

medium

medium

high