Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-4673
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-4673

Description:
Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file. NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/36937

OSVDB
  40434

CONFIRM
  http://docs.info.apple.com/article.html?artnum=306560

BID
  25913

APPLE
  http://lists.apple.com/archives/Security-announce/2007/Oct/msg00000.html


Return to the previous page.