リモート Windows ホストにインストールされている QuickTime が 7.7.2 より前のバージョンであり、そのために以下の脆弱性の影響を受けることがあります。

  - An uninitialized memory access issue exists in the handling of MP4 encoded files. (CVE-2011-3458)

  - An off-by-one buffer overflow exists in the handling of rdrf atoms in QuickTime movie files. (CVE-2011-3459)

  - A stack-based buffer overflow exists in the QuickTime plugin's handling of PNG files. (CVE-2011-3460)

  - A stack-based buffer overflow exists in QuickTime's handling of file paths. (CVE-2012-0265)

  - A buffer overflow exists in the handling of audio sample tables. (CVE-2012-0658)

  - An integer overflow exists in the handling of MPEG files. (CVE-2012-0659)

  - An integer underflow exists in QuickTime's handling of audio streams in MPEG files. (CVE-2012-0660)

  - A use-after-free issue exists in the handling of JPEG2000 encoded movie files. (CVE-2012-0661)

  - Multiple stack overflows exist in QuickTime's handling of TeXML files. (CVE-2012-0663)

  - A heap overflow exists in QuickTime's handling of text tracks. (CVE-2012-0664)

  - A heap overflow exists in the handling of H.264 encoded movie files. (CVE-2012-0665)

  - A stack-based buffer overflow exists in the QuickTime plugin's handling of QTMovie objects. (CVE-2012-0666)

  - A signedness issue exists in the handling of QTVR movie files. (CVE-2012-0667)

  - A buffer overflow exists in QuickTime's handling of Sorenson encoded movie files. (CVE-2012-0669)

  - An integer overflow exists in QuickTime's handling of sean atoms. (CVE-2012-0670)

  - A memory corruption issue exists in the handling of .pict files. (CVE-2012-0671)

The version of QuickTime installed on the remote Windows host is older than 7.7.2 and may be affected by the following vulnerabilities :

  - An uninitialized memory access issue exists in the     handling of MP4 encoded files. (CVE-2011-3458)

  - An off-by-one buffer overflow exists in the handling of     rdrf atoms in QuickTime movie files. (CVE-2011-3459)

  - A stack-based buffer overflow exists in the QuickTime     plugin's handling of PNG files. (CVE-2011-3460)

  - A stack-based buffer overflow exists in QuickTime's     handling of file paths. (CVE-2012-0265)

  - A buffer overflow exists in the handling of audio sample     tables. (CVE-2012-0658)

  - An integer overflow exists in the handling of MPEG     files. (CVE-2012-0659)

  - An integer underflow exists in QuickTime's handling of     audio streams in MPEG files. (CVE-2012-0660)

  - A use-after-free issue exists in the handling of     JPEG2000 encoded movie files. (CVE-2012-0661)

  - Multiple stack overflows exist in QuickTime's handling     of TeXML files. (CVE-2012-0663)

  - A heap overflow exists in QuickTime's handling of text     tracks. (CVE-2012-0664)

  - A heap overflow exists in the handling of H.264 encoded     movie files. (CVE-2012-0665)

  - A stack-based buffer overflow exists in the QuickTime     plugin's handling of QTMovie objects. (CVE-2012-0666)

  - A signedness issue exists in the handling of QTVR movie     files. (CVE-2012-0667)

  - A buffer overflow exists in QuickTime's handling of     Sorenson encoded movie files. (CVE-2012-0669)

  - An integer overflow exists in QuickTime's handling of     sean atoms. (CVE-2012-0670)

  - A memory corruption issue exists in the handling of     .pict files. (CVE-2012-0671)

遠端 Windows 主機上安裝的 QuickTime 版本比 7.7.2 舊，可能會受到下列弱點影響：

- 處理 MP4 編碼檔案時存在一個未初始化記憶體存取問題。(CVE-2011-3458)

- 處理 QuickTime 影片檔案的 rdrf atoms 時存在一個差一緩衝區溢位。(CVE-2011-3459)

- QuickTime 外掛程式處理 PNG 檔案時存在一個堆疊型緩衝區溢位。(CVE-2011-3460)

- QuickTime 處理檔案路徑時存在一個堆疊型緩衝區溢位。(CVE-2012-0265)

- 處理音訊範例表格時存在一個緩衝區溢位。(CVE-2012-0658)

- 處理 MPEG 檔案時存在一個整數溢位。(CVE-2012-0659)

- QuickTime 處理 MPEG 檔案中的音訊資料流時存在一個整數反向溢位。(CVE-2012-0660)

- 處理 JPEG2000 編碼影片檔案時存在一個釋放後使用問題。(CVE-2012-0661)

- QuickTime 處理 TeXML 檔案時存在多個堆疊溢位。(CVE-2012-0663)

- QuickTime 處理文字追蹤時存在一個堆積溢位。(CVE-2012-0664)

- 處理 H.264 編碼影片檔案時存在一個堆積溢位。(CVE-2012-0665)

- QuickTime 外掛程式處理 QTMovie 物件時存在一個堆疊型緩衝區溢位。(CVE-2012-0666)

- 處理 QTVR 影片檔案時存在一個正負號問題。(CVE-2012-0667)

- QuickTime 處理 Sorenson 編碼影片檔案時存在一個緩衝區溢位。(CVE-2012-0669)

- QuickTime 處理 sean atoms 時存在一個整數溢位。(CVE-2012-0670)

- 處理 .pict 檔案時存在一個記憶體損毀問題。(CVE-2012-0671)

远程 Windows 主机上安装的 QuickTime 版本低于 7.7.2，可能受到以下漏洞的影响：

- MP4 编码文件的处理中存在一个未初始化内存访问问题。(CVE-2011-3458)

- QuickTime 电影文件中的 rdrf 原子的处理中存在一处差一缓冲区溢出。(CVE-2011-3459)

- QuickTime 插件对 PNG 文件的处理中存在一处基于堆栈的缓冲区溢出。(CVE-2011-3460)

- QuickTime 对文件路径的处理中存在一处基于堆栈的缓冲区溢出。(CVE-2012-0265)

- 音频采样表的处理中存在一处缓冲区溢出。(CVE-2012-0658)

- MPEG 文件的处理中存在一处整数溢出。(CVE-2012-0659)

- QuickTime 对 MPEG 文件中的音频流的处理中存在一处整数下溢。(CVE-2012-0660)

- JPEG2000 编码电影文件的处理中存在一个释放后使用问题。(CVE-2012-0661)

- QuickTime 对 TeXML 文件的处理中存在多处堆栈溢出。(CVE-2012-0663)

- QuickTime 对文本轨迹的处理中存在一处堆溢出。(CVE-2012-0664)

- H.264 编码电影文件的处理中存在一处堆溢出。(CVE-2012-0665)

- QuickTime 插件对 QTMovie 对象的处理中存在一处基于堆栈的缓冲区溢出。(CVE-2012-0666)

- QTVR 电影文件的处理中存在一个符号问题。(CVE-2012-0667)

- QuickTime 对 Sorenson 编码电影文件的处理中存在一处缓冲区溢出。(CVE-2012-0669)

- QuickTime 对 sean 原子的处理中存在一处整数溢出。(CVE-2012-0670)

- .pict 文件的处理中存在一个内存损坏问题。(CVE-2012-0671)

Versions of QuickTime earlier thanolder than 7.7.2 are affected by the following vulnerabilities :

  - An uninitialized memory access issue exists in the handling of MP4 encoded files. (CVE-2011-3458)

  - An off-by-one buffer overflow exists in the handling of rdrf atoms in QuickTime movie files. (CVE-2011-3459)

  - A stack buffer overflow exists in the QuickTime plugin's handling of PNG files. (CVE-2011-3460)

  - A stack buffer overflow exists in QuickTime's handling of file paths. (CVE-2012-0265)

  - A buffer overflow exists in the handling of audio sample tables. (CVE-2012-0658)

 - An integer overflow exists in the handling of MPEG files. (CVE-2012-0659)

  - An integer underflow exists in QuickTime's handling of audio streams in MPEG files. (CVE-2012-0660)

  - A use-after-free issue exists in the handling of JPEG2000 encoded movie files. (CVE-2012-0661)

  - Multiple stack overflows exist in QuickTime's handling of TeXML files. (CVE-2012-0663)

  - A heap overflow exists in QuickTime's handling of text tracks. (CVE-2012-0664)

  - A heap overflow exists in the handling of H.264 encoded movie files. (CVE-2012-0665)

  - A stack buffer overflow exists in the QuickTime plugin's handling of QTMovie objects. (CVE-2012-0666)

  - A signedness issue exists in the handling of QTVR movie files. (CVE-2012-0667)

  - A buffer overflow exists in QuickTime's handling of Sorenson encoded movie files. (CVE-2012-0669)

  - An integer overflow exists in QuickTime's handling of sean atoms. (CVE-2012-0670)

  - A memory corruption issue exists in the handling of .pict files. (CVE-2012-0671)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
59113	7.7.2より前のQuickTimeの複数の脆弱性（Windows）	Nessus	Windows	2012/5/16	2018/11/15	high
59113	QuickTime < 7.7.2 Multiple Vulnerabilities (Windows)	Nessus	Windows	2012/5/16	2018/11/15	high
59113	QuickTime < 7.7.2 多個弱點 (Windows)	Nessus	Windows	2012/5/16	2018/11/15	high
59113	QuickTime < 7.7.2 多种漏洞 (Windows)	Nessus	Windows	2012/5/16	2018/11/15	high
6489	QuickTime < 7.7.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2012/5/18	2019/3/6	high
801194	QuickTime < 7.7.2 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2012/5/18		high

検出

プラグインの検索

high

high

high

high

high

high