Customer Area
Need help?
Try CSI
Scan Now
Secunia Advisory SA15307Apple QuickTime Quartz Composer Disclosure of System Information
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Description
David Remahl has reported a weakness in Apple QuickTime, which can be exploited by malicious people to disclose some system information. The problem is that Quartz Composer compositions embedded in ".mov" files can access certain system information, which can be disclosed to web sites via JavaScript. This can e.g. be exploited to disclose the local username and directory information by tricking a user into visiting a malicious web site. Solution Provided and/or discovered by Deep Links Do you have additional information related to this advisory?Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Latest advisories
See all
514 views
396 views
332 views
