Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a "sign extension issue."

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.2.  Such versions contain several vulnerabilities :

  - A heap buffer overflow in QuickTime's handling of MS     ADPCM encoded audio data may lead to an application     crash or arbitrary code execution. (CVE-2009-0185)

  - A memory corruption issue in QuickTime's handling of     Sorenson 3 video files may lead to an application crash     or arbitrary code execution. (CVE-2009-0188)

  - A heap buffer overflow in QuickTime's handling of FLC     compression files may lead to an application crash or     arbitrary code execution. (CVE-2009-0951)

  - A buffer overflow in QuickTime's handling of compressed     PSD image files may lead to an application crash or     arbitrary code execution. (CVE-2009-0952)

  - A heap buffer overflow in QuickTime's handling of PICT     image files may lead to an application crash or     arbitrary code execution. (CVE-2009-0953)

  - A sign extension issue in QuickTime's handling of image     description atoms in an Apple video file may lead to an     application crash or arbitrary code execution.     (CVE-2009-0955)

  - An uninitialized memory access issue in QuickTime's     handling of movie files may lead to an application     crash or arbitrary code execution. (CVE-2009-0956)

  - A heap buffer overflow in QuickTime's handling of JP2     image files may lead to an application crash or     arbitrary code execution. (CVE-2009-0957)

The version of QuickTime installed on the remote Windows host is older than 7.6.2.  Such versions contain several vulnerabilities :

  - An integer underflow in QuickTime's handling of PICT     images may result in a heap-based buffer overflow and,     in turn, to an application crash or arbitrary code     execution. (CVE-2009-0010)

  - A heap-based buffer overflow in QuickTime's handling of     MS ADPCM encoded audio data may lead to an application     crash or arbitrary code execution. (CVE-2009-0185)

  - A memory corruption issue in QuickTime's handling of     Sorenson 3 video files may lead to an application crash     or arbitrary code execution. (CVE-2009-0188)

  - A heap-basded buffer overflow in QuickTime's handling of     FLC compression files may lead to an application crash     or arbitrary code execution. (CVE-2009-0951)

  - A buffer overflow in QuickTime's handling of compressed     PSD image files may lead to an application crash or     arbitrary code execution. (CVE-2009-0952)

  - A heap-based buffer overflow in QuickTime's handling of     PICT image files may lead to an application crash or     arbitrary code execution. (CVE-2009-0953)

  - A heap-based buffer overflow in QuickTime's handling of     Clipping Region (CRGN) atom types in a movie file may     lead to an application crash or arbitrary code     execution. (CVE-2009-0954)

  - A sign extension issue in QuickTime's handling of image     description atoms in an Apple video file may lead to an     application crash or arbitrary code execution.
    (CVE-2009-0955)

  - An uninitialized memory access issue in QuickTime's     handling of movie files may lead to an application     crash or arbitrary code execution. (CVE-2009-0956)

  - A heap-based buffer overflow in QuickTime's handling of     JP2 image files may lead to an application crash or     arbitrary code execution. (CVE-2009-0957)

The version of QuickTime installed on the remote host is older than 7.6.2. Such versions contain multiple vulnerabilities : 

  - A memory corruption issue exists in QuickTime's handling of 'Sorenson 3' video files. (CVE-2009-0188)

  - A heap buffer overflow exists in the handling of 'FLC' compression files. (CVE-2009-0951)

  - A buffer overflow may occur when processing compressed 'PSD' images. (CVE-2009-0952)

  - An integer overflow exists in the handling of 'PICT' images could lead to a heap buffer overflow. (CVE-2009-0010), (CVE-2009-0953)

  - A heap buffer overflow could occur when handling 'Clipping Region' atom types in a movie file. (CVE-2009-0954)

  - A heap buffer overflow exists in the handling of 'MS ADPCM' encoded audio data. (CVE-2009-0185)

  - A sign extension issue exists in the handling of image description atoms. (CVE-2009-0955)

  - An uninitialized memory access issue exists when handling movie files with a zero user data atom size. (CVE-2009-0956)

  - A heap buffer overflow exists in the handling of 'JP2' images. (CVE-2009-0957)

ID	Name	Product	Family	Type	Severity
38989	QuickTime < 7.6.2 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	high
38988	QuickTime < 7.6.2 Multiple Vulnerabilities (Windows)	Nessus	Windows	Local	high
5042	QuickTime < 7.6.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients		medium

Detections

Analytics

CVE-2009-0955

high

Tenable Plugins

high

high

medium