The version of QuickTime installed on the remote Windows host is older than 7.7.2 and may be affected by the following vulnerabilities :

  - An uninitialized memory access issue exists in the     handling of MP4 encoded files. (CVE-2011-3458)

  - An off-by-one buffer overflow exists in the handling of     rdrf atoms in QuickTime movie files. (CVE-2011-3459)

  - A stack-based buffer overflow exists in the QuickTime     plugin's handling of PNG files. (CVE-2011-3460)

  - A stack-based buffer overflow exists in QuickTime's     handling of file paths. (CVE-2012-0265)

  - A buffer overflow exists in the handling of audio sample     tables. (CVE-2012-0658)

  - An integer overflow exists in the handling of MPEG     files. (CVE-2012-0659)

  - An integer underflow exists in QuickTime's handling of     audio streams in MPEG files. (CVE-2012-0660)

  - A use-after-free issue exists in the handling of     JPEG2000 encoded movie files. (CVE-2012-0661)

  - Multiple stack overflows exist in QuickTime's handling     of TeXML files. (CVE-2012-0663)

  - A heap overflow exists in QuickTime's handling of text     tracks. (CVE-2012-0664)

  - A heap overflow exists in the handling of H.264 encoded     movie files. (CVE-2012-0665)

  - A stack-based buffer overflow exists in the QuickTime     plugin's handling of QTMovie objects. (CVE-2012-0666)

  - A signedness issue exists in the handling of QTVR movie     files. (CVE-2012-0667)

  - A buffer overflow exists in QuickTime's handling of     Sorenson encoded movie files. (CVE-2012-0669)

  - An integer overflow exists in QuickTime's handling of     sean atoms. (CVE-2012-0670)

  - A memory corruption issue exists in the handling of     .pict files. (CVE-2012-0671)

リモート Windows ホストにインストールされている QuickTime が 7.7.2 より前のバージョンであり、そのために以下の脆弱性の影響を受けることがあります。

  - An uninitialized memory access issue exists in the handling of MP4 encoded files. (CVE-2011-3458)

  - An off-by-one buffer overflow exists in the handling of rdrf atoms in QuickTime movie files. (CVE-2011-3459)

  - A stack-based buffer overflow exists in the QuickTime plugin's handling of PNG files. (CVE-2011-3460)

  - A stack-based buffer overflow exists in QuickTime's handling of file paths. (CVE-2012-0265)

  - A buffer overflow exists in the handling of audio sample tables. (CVE-2012-0658)

  - An integer overflow exists in the handling of MPEG files. (CVE-2012-0659)

  - An integer underflow exists in QuickTime's handling of audio streams in MPEG files. (CVE-2012-0660)

  - A use-after-free issue exists in the handling of JPEG2000 encoded movie files. (CVE-2012-0661)

  - Multiple stack overflows exist in QuickTime's handling of TeXML files. (CVE-2012-0663)

  - A heap overflow exists in QuickTime's handling of text tracks. (CVE-2012-0664)

  - A heap overflow exists in the handling of H.264 encoded movie files. (CVE-2012-0665)

  - A stack-based buffer overflow exists in the QuickTime plugin's handling of QTMovie objects. (CVE-2012-0666)

  - A signedness issue exists in the handling of QTVR movie files. (CVE-2012-0667)

  - A buffer overflow exists in QuickTime's handling of Sorenson encoded movie files. (CVE-2012-0669)

  - An integer overflow exists in QuickTime's handling of sean atoms. (CVE-2012-0670)

  - A memory corruption issue exists in the handling of .pict files. (CVE-2012-0671)

遠端 Windows 主機上安裝的 QuickTime 版本比 7.7.2 舊，可能會受到下列弱點影響：

- 處理 MP4 編碼檔案時存在一個未初始化記憶體存取問題。(CVE-2011-3458)

- 處理 QuickTime 影片檔案的 rdrf atoms 時存在一個差一緩衝區溢位。(CVE-2011-3459)

- QuickTime 外掛程式處理 PNG 檔案時存在一個堆疊型緩衝區溢位。(CVE-2011-3460)

- QuickTime 處理檔案路徑時存在一個堆疊型緩衝區溢位。(CVE-2012-0265)

- 處理音訊範例表格時存在一個緩衝區溢位。(CVE-2012-0658)

- 處理 MPEG 檔案時存在一個整數溢位。(CVE-2012-0659)

- QuickTime 處理 MPEG 檔案中的音訊資料流時存在一個整數反向溢位。(CVE-2012-0660)

- 處理 JPEG2000 編碼影片檔案時存在一個釋放後使用問題。(CVE-2012-0661)

- QuickTime 處理 TeXML 檔案時存在多個堆疊溢位。(CVE-2012-0663)

- QuickTime 處理文字追蹤時存在一個堆積溢位。(CVE-2012-0664)

- 處理 H.264 編碼影片檔案時存在一個堆積溢位。(CVE-2012-0665)

- QuickTime 外掛程式處理 QTMovie 物件時存在一個堆疊型緩衝區溢位。(CVE-2012-0666)

- 處理 QTVR 影片檔案時存在一個正負號問題。(CVE-2012-0667)

- QuickTime 處理 Sorenson 編碼影片檔案時存在一個緩衝區溢位。(CVE-2012-0669)

- QuickTime 處理 sean atoms 時存在一個整數溢位。(CVE-2012-0670)

- 處理 .pict 檔案時存在一個記憶體損毀問題。(CVE-2012-0671)

远程 Windows 主机上安装的 QuickTime 版本低于 7.7.2，可能受到以下漏洞的影响：

- MP4 编码文件的处理中存在一个未初始化内存访问问题。(CVE-2011-3458)

- QuickTime 电影文件中的 rdrf 原子的处理中存在一处差一缓冲区溢出。(CVE-2011-3459)

- QuickTime 插件对 PNG 文件的处理中存在一处基于堆栈的缓冲区溢出。(CVE-2011-3460)

- QuickTime 对文件路径的处理中存在一处基于堆栈的缓冲区溢出。(CVE-2012-0265)

- 音频采样表的处理中存在一处缓冲区溢出。(CVE-2012-0658)

- MPEG 文件的处理中存在一处整数溢出。(CVE-2012-0659)

- QuickTime 对 MPEG 文件中的音频流的处理中存在一处整数下溢。(CVE-2012-0660)

- JPEG2000 编码电影文件的处理中存在一个释放后使用问题。(CVE-2012-0661)

- QuickTime 对 TeXML 文件的处理中存在多处堆栈溢出。(CVE-2012-0663)

- QuickTime 对文本轨迹的处理中存在一处堆溢出。(CVE-2012-0664)

- H.264 编码电影文件的处理中存在一处堆溢出。(CVE-2012-0665)

- QuickTime 插件对 QTMovie 对象的处理中存在一处基于堆栈的缓冲区溢出。(CVE-2012-0666)

- QTVR 电影文件的处理中存在一个符号问题。(CVE-2012-0667)

- QuickTime 对 Sorenson 编码电影文件的处理中存在一处缓冲区溢出。(CVE-2012-0669)

- QuickTime 对 sean 原子的处理中存在一处整数溢出。(CVE-2012-0670)

- .pict 文件的处理中存在一个内存损坏问题。(CVE-2012-0671)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-004 applied. This update contains multiple security-related fixes for the following components :

  - Apache
  - Data Security
  - DirectoryService
  - ImageIO
  - International Components for Unicode
  - Mail
  - PHP
  - QuickLook
  - QuickTime
  - Ruby

遠端主機執行的 Mac OS X 10.6 版本並未套用安全性更新 2012-004。此項更新包含下列元件的多項安全性相關修正：

- Apache
 - Data Security
 - DirectoryService
 - ImageIO
 - International Components for Unicode
 - Mail
 - PHP
 - QuickLook
 - QuickTime
 - Ruby

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.5. The newer version contains multiple security-related fixes for the following components :

  - Apache
  - BIND
  - CoreText
  - Data Security
  - ImageIO
  - Installer
  - International Components for Unicode
  - Kernel
  - Mail
  - PHP
  - Profile Manager
  - QuickLook
  - QuickTime
  - Ruby
  - USB

リモートホストが、バージョン 10.7.5 より前の Mac OS X 10.7.x を実行しています。新しいバージョンには、次のコンポーネントに対する複数のセキュリティ関連の修正が含まれています。

- Apache
 - BIND
 - CoreText
 - Data Security
 - ImageIO
 - Installer
 - International Components for Unicode
 - Kernel
 - Mail
 - PHP
 - Profile Manager
 - QuickLook
 - QuickTime
 - Ruby
 - USB

远程主机正在运行的 Mac OS X 10.6 版本未应用安全更新 2012-004。此更新包含针对以下组件的与安全有关的多个补丁：

- Apache
 - Data Security
 - DirectoryService
 - ImageIO
 - International Components for Unicode
 - Mail
 - PHP
 - QuickLook
 - QuickTime
 - Ruby

遠端主機執行的 Mac OS X 10.7.x 版本比 10.7.5 版舊。此更新版本包含下列元件的多項安全性相關修正：

- Apache
 - BIND
 - CoreText
 - Data Security
 - ImageIO
 - Installer
 - International Components for Unicode
 - Kernel
 - Mail
 - PHP
 - Profile Manager
 - QuickLook
 - QuickTime
 - Ruby
 - USB

リモートホストは、セキュリティ更新 2012-004 を適用していないバージョンの Mac OS X 10.6 を実行しています。この更新には、次のコンポーネントに対する複数のセキュリティ関連の修正が含まれています。

- Apache
 - Data Security
 - DirectoryService
 - ImageIO
 - International Components for Unicode
 - Mail
 - PHP
 - QuickLook
 - QuickTime
 - Ruby

远程主机正在运行低于 10.7.5 的 Mac OS X 10.7.x 版本。更新的版本包含针对以下组件的与安全有关的多个补丁：

- Apache
 - BIND
 - CoreText
 - Data Security
 - ImageIO
 - Installer
 - International Components for Unicode
 - Kernel
 - Mail
 - PHP
 - Profile Manager
 - QuickLook
 - QuickTime
 - Ruby
 - USB

Versions of QuickTime earlier thanolder than 7.7.2 are affected by the following vulnerabilities :

  - An uninitialized memory access issue exists in the handling of MP4 encoded files. (CVE-2011-3458)

  - An off-by-one buffer overflow exists in the handling of rdrf atoms in QuickTime movie files. (CVE-2011-3459)

  - A stack buffer overflow exists in the QuickTime plugin's handling of PNG files. (CVE-2011-3460)

  - A stack buffer overflow exists in QuickTime's handling of file paths. (CVE-2012-0265)

  - A buffer overflow exists in the handling of audio sample tables. (CVE-2012-0658)

 - An integer overflow exists in the handling of MPEG files. (CVE-2012-0659)

  - An integer underflow exists in QuickTime's handling of audio streams in MPEG files. (CVE-2012-0660)

  - A use-after-free issue exists in the handling of JPEG2000 encoded movie files. (CVE-2012-0661)

  - Multiple stack overflows exist in QuickTime's handling of TeXML files. (CVE-2012-0663)

  - A heap overflow exists in QuickTime's handling of text tracks. (CVE-2012-0664)

  - A heap overflow exists in the handling of H.264 encoded movie files. (CVE-2012-0665)

  - A stack buffer overflow exists in the QuickTime plugin's handling of QTMovie objects. (CVE-2012-0666)

  - A signedness issue exists in the handling of QTVR movie files. (CVE-2012-0667)

  - A buffer overflow exists in QuickTime's handling of Sorenson encoded movie files. (CVE-2012-0669)

  - An integer overflow exists in QuickTime's handling of sean atoms. (CVE-2012-0670)

  - A memory corruption issue exists in the handling of .pict files. (CVE-2012-0671)

The remote host is running a version of Mac OS X 10.7 that is older than version 10.7.5.  The newer version contains numerous security-related fixes for the following components :

  - Apache

  - BIND

  - CoreText

  - Data Security

  - ImageIO

  - Installer

  - International Components for Unicode

  - Kernel

  - Mail

  - PHP

  - Profile Manager

  - QuickLook

  - QuickTime

  - Ruby

  - USB

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
59113	QuickTime < 7.7.2 Multiple Vulnerabilities (Windows)	Nessus	Windows	2012/5/16	2018/11/15	high
59113	7.7.2より前のQuickTimeの複数の脆弱性（Windows）	Nessus	Windows	2012/5/16	2018/11/15	high
59113	QuickTime < 7.7.2 多個弱點 (Windows)	Nessus	Windows	2012/5/16	2018/11/15	high
59113	QuickTime < 7.7.2 多种漏洞 (Windows)	Nessus	Windows	2012/5/16	2018/11/15	high
62213	Mac OS X Multiple Vulnerabilities (Security Update 2012-004) (BEAST)	Nessus	MacOS X Local Security Checks	2012/9/20	2024/5/28	critical
62213	Mac OS X 多個弱點 (安全性更新 2012-004) (BEAST)	Nessus	MacOS X Local Security Checks	2012/9/20	2024/5/28	critical
62214	Mac OS X 10.7.x < 10.7.5 Multiple Vulnerabilities (BEAST)	Nessus	MacOS X Local Security Checks	2012/9/20	2024/5/28	critical
62214	Mac OS X 10.7.x < 10.7.5 複数の脆弱性（BEAST）	Nessus	MacOS X Local Security Checks	2012/9/20	2024/5/28	critical
62213	Mac OS X 多种漏洞（安全更新 2012-004）(BEAST)	Nessus	MacOS X Local Security Checks	2012/9/20	2024/5/28	critical
62214	Mac OS X 10.7.x < 10.7.5 多個弱點 (BEAST)	Nessus	MacOS X Local Security Checks	2012/9/20	2024/5/28	critical
62213	Mac OS X 複数の脆弱性（セキュリティ更新 2012-004）（BEAST）	Nessus	MacOS X Local Security Checks	2012/9/20	2024/5/28	critical
62214	Mac OS X 10.7.x < 10.7.5 多种漏洞 (BEAST)	Nessus	MacOS X Local Security Checks	2012/9/20	2024/5/28	critical
6489	QuickTime < 7.7.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2012/5/18	2019/3/6	high
6583	Mac OS X 10.7 < 10.7.5 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2012/9/21	2019/3/6	critical
801194	QuickTime < 7.7.2 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2012/5/18		high

检测

插件搜索

high

high

high

high

critical

critical

critical

critical

critical

critical

critical

critical

high

critical

high