Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MIDI file.

According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows.  An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially-crafted file to a victim and having him open it using QuickTime.

According to its version, the installation of Quicktime on the remote Mac OS X host is affected by multiple buffer overflows.  An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially crafted file to a victim and having him open it using QuickTime.

According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows.  An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially crafted file to a victim and having him open it using QuickTime.

ID	Name	Product	Family	Severity
3935	QuickTime < 7.1.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
24762	Quicktime < 7.1.5 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	high
24761	QuickTime < 7.1.5 Multiple Vulnerabilities (Windows)	Nessus	Windows	high

Detections

Analytics

CVE-2007-0712

high

Tenable Plugins

medium

high

high