Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message.

The version of QuickTime installed on the remote Windows host is older than 7.4.1.  Such versions contain a heap buffer overflow in the application's handling of HTTP responses when RTSP tunneling is enabled.  If an attacker can trick a user to visit a specially-crafted webpage, he may be able to to execute arbitrary code on the remote host subject to the user's privileges.

The version of QuickTime installed on the remote Windows host is older than 7.4.1.  Such versions contain a heap-based buffer overflow in the application's handling of HTTP responses when RTSP tunneling is enabled.  If an attacker can trick a user into visiting a specially crafted webpage, arbitrary code could be executed on the remote host subject to the user's privileges.

The version of QuickTime installed on the remote Mac OS X host is older than 7.4.1.  Such versions contain a heap buffer overflow in the application's handling of HTTP responses when RTSP tunneling is enabled.  If an attacker can trick a user to visit a specially crafted webpage, he may be able to to execute arbitrary code on the remote host subject to the user's privileges.

ID	Name	Product	Family	Type	Severity
4363	QuickTime < 7.4.1 RTSP Response Handling Overflow	Nessus Network Monitor	Web Clients		medium
30204	QuickTime < 7.4.1 RTSP Response Long Reason-Phrase Arbitrary Remote Code Execution (Windows)	Nessus	Windows	Local	high
30203	QuickTime < 7.4.1 RTSP Response Long Reason-Phrase Arbitrary Remote Code Execution (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2008-0234

critical

Tenable Plugins

medium

high

high