Test ID:	1.3.6.1.4.1.25623.1.0.900074
Category:	Denial of Service
Title:	Apple QuickTime Multiple Vulnerabilities (Jan 2009) - Windows
Summary:	Apple QuickTime is prone to Multiple Vulnerabilities.
Description:	Summary: Apple QuickTime is prone to Multiple Vulnerabilities. Vulnerability Insight: - Application fails in handling of RTSP URLs, THKD atoms in QTVR (QuickTime Virtual Reality) movie files and jpeg atoms in QT movie files. - Popping of overflow errors while processing an AVI movie file. - Player fails to handle MPEG-2 video files with MP3 audio content and H.263 encoded movie files. - Signedness flaw in handling of Cinepak encoded movie files. - Input validation flaw exists in the QT MPEG-2 Playback Component. Vulnerability Impact: Attackers can execute arbitrary code by sending maliciously crafted RTSP URLs and viewing a maliciously crafted QTVR file can lead to unexpected application termination. Affected Software/OS: Apple QuickTime before 7.60.92.0 on Windows (Any). Solution: Upgrade to Apple QuickTime version 7.60.92.0 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0001 http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html BugTraq ID: 33385 http://www.securityfocus.com/bid/33385 Cert/CC Advisory: TA09-022A http://www.us-cert.gov/cas/techalerts/TA09-022A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6135 http://secunia.com/advisories/33632 http://www.vupen.com/english/advisories/2009/0212 XForce ISS Database: quicktime-rtspurl-bo(48154) https://exchange.xforce.ibmcloud.com/vulnerabilities/48154 Common Vulnerability Exposure (CVE) ID: CVE-2009-0002 BugTraq ID: 33384 http://www.securityfocus.com/bid/33384 Bugtraq: 20090121 ZDI-09-005: Apple QuickTime VR Track Header Atom Heap Corruption Vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2009-01/0210.html http://www.zerodayinitiative.com/advisories/ZDI-09-005/ http://osvdb.org/51525 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5646 Common Vulnerability Exposure (CVE) ID: CVE-2009-0003 BugTraq ID: 33387 http://www.securityfocus.com/bid/33387 http://www.zerodayinitiative.com/advisories/ZDI-09-006/ http://osvdb.org/51526 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6218 Common Vulnerability Exposure (CVE) ID: CVE-2009-0004 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6211 XForce ISS Database: quicktime-mpeg2-bo(48157) https://exchange.xforce.ibmcloud.com/vulnerabilities/48157 Common Vulnerability Exposure (CVE) ID: CVE-2009-0005 BugTraq ID: 33386 http://www.securityfocus.com/bid/33386 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6187 XForce ISS Database: quicktime-h263-movie-code-execution(48158) https://exchange.xforce.ibmcloud.com/vulnerabilities/48158 Common Vulnerability Exposure (CVE) ID: CVE-2009-0006 BugTraq ID: 33388 http://www.securityfocus.com/bid/33388 Bugtraq: 20090121 ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2009-01/0215.html Bugtraq: 20090124 Re: ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability (Google Search) http://www.securityfocus.com/archive/1/500391/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-09-007/ http://osvdb.org/51529 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6153 Common Vulnerability Exposure (CVE) ID: CVE-2009-0007 BugTraq ID: 33390 http://www.securityfocus.com/bid/33390 http://www.zerodayinitiative.com/advisories/ZDI-09-008/ http://osvdb.org/51530 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6132 Common Vulnerability Exposure (CVE) ID: CVE-2009-0008 http://lists.apple.com/archives/security-announce//2009/Jan/msg00001.html BugTraq ID: 33393 http://www.securityfocus.com/bid/33393 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5974 http://www.securitytracker.com/id?1021621 http://secunia.com/advisories/33642 http://www.vupen.com/english/advisories/2009/0211 XForce ISS Database: quicktime-mpeg2playback-code-execution(48162) https://exchange.xforce.ibmcloud.com/vulnerabilities/48162
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.