Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute arbitrary commands via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter containing the Firefox "-chrome" argument. NOTE: this is a related issue to CVE-2006-4965 and the result of an incomplete fix for CVE-2007-3670.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2007-09-24T00:00:00
Updated: 2018-10-15T20:57:01
Reserved: 2007-09-23T00:00:00
Link: CVE-2007-5045
JSON object: View
NVD Information
Status : Modified
Published: 2007-09-24T00:17:00.000
Modified: 2018-10-15T21:40:08.957
Link: CVE-2007-5045
JSON object: View
Redhat Information
No data.
CWE