Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QuickTime movie with a User Data Atom (UDTA) with an Atom size field with a large value.

According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows.  An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially-crafted file to a victim and having him open it using QuickTime.

According to its version, the installation of Quicktime on the remote Mac OS X host is affected by multiple buffer overflows.  An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially crafted file to a victim and having him open it using QuickTime.

According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows.  An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially crafted file to a victim and having him open it using QuickTime.

ID	Name	Product	Family	Type	Severity
3935	QuickTime < 7.1.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients		medium
24762	Quicktime < 7.1.5 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	high
24761	QuickTime < 7.1.5 Multiple Vulnerabilities (Windows)	Nessus	Windows	Local	high

Detections

Analytics

CVE-2007-0714

critical

Tenable Plugins

medium

high

high