Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms.

The version of QuickTime installed on the remote host is older than 7.6.  Such versions contain several vulnerabilities : 

  - A heap buffer overflow in QuickTime's handling of RTSP URLs may lead to an application crash or arbitrary code execution. (CVE-2009-0001)

  - A heap buffer overflow in QuickTime's handling of THKD atoms in QTVR (QuickTime Virtual Reality) movie files may lead to an application crash or arbitrary code execution. (CVE-2009-0002)

  - A heap buffer overflow while processing an AVI movie file may lead to an application crash or arbitrary code execution. (CVE-2009-0003)

  - A buffer overflow in the handling of MPEG-2 video files with MP3 audio content may lead to an application crash or arbitrary code execution. (CVE-2009-0004)

  - A memory corruption in QuickTime's handling of H.263 encoded movie files may lead to an application crash or arbitrary code execution. (CVE-2009-0005)

  - A signedness issue in QuickTime's handling of Cinepak encoded movie files may result in a heap buffer overflow. (CVE-2009-0006)

  - A heap buffer overflow in QuickTime's handling of JPEG atoms in QuickTime movie files may lead to an application crash or arbitrary code execution. (CVE-2009-0007)

The version of QuickTime installed on the remote Windows host is older than 7.6. Such versions contain several vulnerabilities :

  - A heap-based buffer overflow in QuickTime's handling of     RTSP URLs may lead to an application crash or arbitrary     code execution. (CVE-2009-0001)

  - A heap-based buffer overflow in QuickTime's handling of     THKD atoms in QTVR (QuickTime Virtual Reality) movie     file may lead to an application crash or arbitrary code     execution. (CVE-2009-0002)

  - A heap-based buffer overflow while processing an AVI     movie file may lead to an application crash or arbitrary     code execution. (CVE-2009-0003)

  - A buffer overflow in the handling of MPEG-2 video files     with MP3 audio content may lead to an application crash     or arbitrary code execution. (CVE-2009-0004)

  - A memory corruption in QuickTime's handling of H.263     encoded movie files may lead to an application crash or     arbitrary code execution. (CVE-2009-0005)

  - A signedness issue in QuickTime's handling of Cinepak     encoded movie files may result in a heap buffer     overflow. (CVE-2009-0006)

  - A heap-based buffer overflow in QuickTime's handling of     jpeg atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2009-0007)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.  Such versions contain several vulnerabilities :

  - A heap buffer overflow in QuickTime's handling of RTSP     URLs may lead to an application crash or arbitrary code     execution. (CVE-2009-0001)

  - A heap buffer overflow in QuickTime's handling of THKD     atoms in QTVR (QuickTime Virtual Reality) movie files     may lead to an application crash or arbitrary code     execution. (CVE-2009-0002)

  - A heap buffer overflow while processing an AVI movie     file may lead to an application crash or arbitrary code     execution. (CVE-2009-0003)

  - A buffer overflow in the handling of MPEG-2 video files     with MP3 audio content may lead to an application crash     or arbitrary code execution. (CVE-2009-0004)

  - A memory corruption in QuickTime's handling of H.263     encoded movie files may lead to an application crash or     arbitrary code execution. (CVE-2009-0005)

  - A signedness issue in QuickTime's handling of Cinepak     encoded movie files may result in a heap buffer     overflow. (CVE-2009-0006)

  - A heap buffer overflow in QuickTime's handling of jpeg     atoms in QuickTime movie files may lead to an     application crash or arbitrary code execution.
    (CVE-2009-0007)

ID	Name	Product	Family	Severity
4817	QuickTime < 7.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
35437	QuickTime < 7.6 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
35436	QuickTime < 7.6 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2009-0007

high

Tenable Plugins

medium

high

high