Heap-based buffer overflow in the JVTCompEncodeFrame function in Apple Quicktime 7.1.5 and other versions before 7.2 allows remote attackers to execute arbitrary code via a crafted H.264 MOV file.

The version of QuickTime installed on the remote Windows host is older than 7.2.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially-crafted file with QuickTime.

The version of QuickTime installed on the remote Mac OS X host is older than 7.2.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted file with QuickTime.

The version of QuickTime installed on the remote Windows host is older than 7.2.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted file with QuickTime.

According to its version, the installation of QuickTime on the remote Windows host is affected by a flaw in the way that it handles malformed Java byte code.  An attacker exploiting this flaw would need to be able to convince a user to browse to a malicious site.  Further, the browser must be Java-enabled and have a vulnerable version of QuickTime installed.  Successful exploitation would result in the attacker executing arbitrary code on the client system.  In addition, this version of QuickTime is vulnerable to an integer overflow and a heap overflow.  An attacker exploiting either of these flaws will be able to execute code on the remote machine.

ID	Name	Product	Family	Severity
4132	QuickTime < 7.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
25704	QuickTime < 7.2 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	high
25703	QuickTime < 7.2 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
3975	QuickTime < 7.1.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium

Detections

Analytics

CVE-2007-2295

high

Tenable Plugins

medium

high

high

medium