The version of QuickTime installed on the remote Windows host is older than 7.7.4.  It is, therefore, reportedly affected by the following vulnerabilities :

  - Buffer overflow vulnerabilities exist in the handling of     'dref' atoms, 'enof' atoms, 'mvhd' atoms, FPX files, MP3     files, H.263 and H.264 encoded movie files, Sorenson     encoded movie files, and  JPEG encoded data.
    (CVE-2013-0986, CVE-2013-0988, CVE-2013-0989,     CVE-2013-1016, CVE-2013-1017, CVE-2013-1018,     CVE-2013-1019, CVE-2013-1021, CVE-2013-1022)

  - Memory corruption vulnerabilities exist in the handling     of QTIF files, TeXML files, and JPEG encoded data.
    (CVE-2013-0987, CVE-2013-1015, CVE-2013-1020)

Successful exploitation of these issues could result in program termination or arbitrary code execution, subject to the user's privileges.

远程 Windows 主机上安装的 QuickTime 版本低于 7.7.4。因此据报告，它受到以下漏洞的影响：

- “dref”原子、“enof”原子、“mvhd”原子、FPX 文件、MP3 文件、H.263 和 H.264 编码电影文件、Sorenson 编码电影文件以及 JPEG 编码数据的处理中存在缓冲区溢出漏洞。
 （CVE-2013-0986、CVE-2013-0988、CVE-2013-0989、CVE-2013-1016、CVE-2013-1017、CVE-2013-1018、CVE-2013-1019、CVE-2013-1021、CVE-2013-1022）

- QTIF 文件、TeXML 文件和 JPEG 编码文件的处理中存在内存损坏漏洞。
 （CVE-2013-0987、CVE-2013-1015、CVE-2013-1020）

成功利用这些问题可能导致程序终止或执行任意代码，具体受限于用户的权限。

遠端 Windows 主機上安裝的 QuickTime 版本比 7.7.4 舊。因此，據報會受到下列弱點影響：

- 'dref' Atom、'enof' Atom、'mvhd' Atom、FPX 檔、MP3 檔、H.263 和 H.264 編碼的電影檔、Sorenson 編碼的電影檔，以及 JPEG 編碼的資料處理中存有多個緩衝區溢位弱點。
 (CVE-2013-0986、CVE-2013-0988、CVE-2013-0989、CVE-2013-1016、CVE-2013-1017、CVE-2013-1018、CVE-2013-1019、CVE-2013-1021、CVE-2013-1022)

- QTIF 檔、TeXML 檔和 JPEG 編碼的資料處理中存有多個記憶體損毀弱點。
 (CVE-2013-0987、CVE-2013-1015、CVE-2013-1020)

如果成功惡意利用這些問題，可導致程式終止或執行需要使用者權限的任意程式碼。

Versions of QuickTime earlier than 7.7.4 are affected by the following vulnerabilities :

  - A buffer overflow existed in the handling of 'enof' atoms. (CVE-2013-0986)

  - A memory corruption issue existed in the handling of QTIF files. (CVE-2013-0987)

  - A buffer overflow existed in the handling of FPX files. (CVE-2013-0988)

  - A buffer overflow existed in the handling of MP3 files. (CVE-2013-0989)

  - A memory corruption issue existed in the handling of TeXML files. (CVE-2013-1015)

  - A buffer overflow existed in the handling of H.263 encoded movie files. (CVE-2013-1016)

  - A buffer overflow existed in the handling of 'dref' atoms. (CVE-2013-1017)

  - A buffer overflow existed in the handling of H.264 encoded movie files. (CVE-2013-1018)

  - A buffer overflow existed in the handling of Sorenson encoded movie files.  (CVE-2013-1019)

  - A memory corruption issue existed in the handling of JPEG encoded data. (CVE-2013-1020)

  - A buffer overflow existed in the handling of JPEG encoded data. (CVE-2013-1021)

  - A buffer underflow existed in the handling of 'mvhd' atoms.  (CVE-2013-1022)

Successful exploitation of these issues could result in program termination or arbitrary code execution, subject to the user's privileges

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
66636	QuickTime < 7.7.4 Multiple Vulnerabilities (Windows)	Nessus	Windows	2013/5/28	2018/11/15	high
66636	QuickTime < 7.7.4 多种漏洞 (Windows)	Nessus	Windows	2013/5/28	2018/11/15	high
66636	QuickTime < 7.7.4 多個弱點 (Windows)	Nessus	Windows	2013/5/28	2018/11/15	high
6840	QuickTime < 7.7.4 Multiple Vulnerabilities (Windows) (deprecated)	Nessus Network Monitor	Web Clients	2013/5/23	2019/3/6	high

检测

插件搜索

high

high

high

high