The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.5.  Mac OS X 10.5.5 contains security fixes for a number of programs.

 The version of QuickTime installed on the remote host is older than 7.5.5.  Such versions contain several vulnerabilities :

  - Heap and stack buffer overflows in the handling of panorama atoms in QTVR (QuickTime Virtual Reality) movie files could lead to an application crash or arbitrary code execution (CVE-2008-3624 and CVE-2008-3625).
  - A memory corruption issue in QuickTime's handling of STSZ atoms in movie files could lead to an application crash or arbitrary code execution (CVE-2008-3626).
  - Multiple memory corruption issues in QuickTime's handling of H.264-encoded movie files could lead to an application crash or arbitrary code execution (CVE-2008-3627).
  - An out-of-bounds read issue in QuickTime's handling of PICT images could lead to an application crash (CVE-2008-3629).

The version of QuickTime installed on the remote Windows host is older than 7.5.5.  Such versions contain several vulnerabilities :

  - An integer overflow in QuickTime's handling of PICT     images may lead to an application crash or arbitrary     code execution (CVE-2008-3614).

  - An uninitialized memory access issue in the third-     party Indeo v5 codec, which does not ship with     QuickTime, may lead to an application crash or arbitrary     code execution (CVE-2008-3615).

  - Heap and stack-based buffer overflows in the handling of     panorama atoms in QTVR (QuickTime Virtual Reality)     movie files could lead to an application crash or     arbitrary code execution (CVE-2008-3624 and     CVE-2008-3625).

  - A memory corruption issue in QuickTime's handling of     STSZ atoms in movie files could lead to an     application crash or arbitrary code execution     (CVE-2008-3626).

  - Multiple memory corruption issues in QuickTime's     handling of H.264-encoded movie files could lead to     an application crash or arbitrary code execution     (CVE-2008-3627).

  - An invalid pointer issue in QuickTime's handling of     PICT images could lead to an application crash or     arbitrary code execution (CVE-2008-3628).

  - An out-of-bounds read issue in QuickTime's handling     of PICT images could lead to an application crash     (CVE-2008-3629).

  - A stack-based buffer overflow exists in the third-party     Indeo v3.2 codec for QuickTime, which could lead to an     application crash or arbitrary code execution when     viewing a specially crafted movie file (CVE-2008-3635).

The version of QuickTime installed on the remote Mac OS X host is older than 7.5.5.  Such versions contain several vulnerabilities :

  - Heap and stack-based buffer overflows in the handling of     panorama atoms in QTVR (QuickTime Virtual Reality)     movie files could lead to an application crash or     arbitrary code execution (CVE-2008-3624 and     CVE-2008-3625).

  - A memory corruption issue in QuickTime's handling of     STSZ atoms in movie files could lead to an     application crash or arbitrary code execution     (CVE-2008-3626).

  - Multiple memory corruption issues in QuickTime's     handling of H.264-encoded movie files could lead to     an application crash or arbitrary code execution     (CVE-2008-3627).

  - An out-of-bounds read issue in QuickTime's handling     of PICT images could lead to an application crash     (CVE-2008-3629).

ID	Name	Product	Family	Type	Severity
4682	Mac OS X < 10.5.5 Multiple Vulnerabilities	Nessus Network Monitor	Generic		critical
4651	QuickTime < 7.5.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients		medium
34119	QuickTime < 7.5.5 Multiple Vulnerabilities (Windows)	Nessus	Windows	Local	high
34118	QuickTime < 7.5.5 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2008-3626

high

Tenable Plugins

critical

medium

high

high