Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.

The version of QuickTime installed on the remote Windows host is older than 7.3.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted file with QuickTime.

The version of QuickTime installed on the remote Mac OS X host is older than 7.3.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted file with QuickTime.

The version of QuickTime installed on the remote Windows host is older than 7.3.  Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if the user can be convinced to open a specially-crafted file with QuickTime.

ID	Name	Product	Family	Severity
27626	QuickTime < 7.3 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
27625	QuickTime < 7.3 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	high
4277	QuickTime < 7.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium

Detections

Analytics

CVE-2007-4676

high

Tenable Plugins

high

high

medium