Quicktime < 7.0.3 (Windows) Detection

High Nessus Network Monitor Plugin ID 3280

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote Windows host is running a version of Quicktime 7 that is older than Quicktime 7.0.3. This version is vulnerable to various buffer overflows that may allow an attacker to execute arbitrary code on the remote host by sending a malformed file to a victim and have him open it using QuickTime player.

Solution

Upgrade to version 7.0.3 or higher.

See Also

http://docs.info.apple.com/article.html?artnum=302772

Plugin Details

Severity: High

ID: 3280

Family: Web Clients

Published: 2005/11/07

Modified: 2016/01/19

Dependencies: 1735, 8314

Nessus ID: 20136

Risk Information

Risk Factor: High

CVSSv2

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 8.1

Temporal Score: 7.1

Vector: CVSS3#AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:apple:quicktime

Reference Information

CVE: CVE-2005-2756, CVE-2005-2753, CVE-2005-2754, CVE-2005-2755

BID: 15306, 15307, 15308, 15309