EUVD-2007-5827

Malware in sbrugna...

Apple Quicktime <= 7.1.3 (HREFTrack) Cross-Zone Scripting Exploit

No description provided by source. !/usr/bin/ruby c 2006 LMH lmh at info-pull.com Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the fake FTP server required. HTTP server port can...

Apple QuickTime MOV File HREFTrack Cross-Zone Scripting

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video formats. QuickTime is capable of processing the Apple QuickTime movie file format, which is a proprietary format created by Appl...

Design/Logic Flaw

Quick Look in Apple Mac OS X 10.5.1 does not prevent a movie from accessing URLs when the movie file is previewed or if an icon is created, which might allow remote attackers to obtain sensitive information via HREFTrack...

CVE-2007-5857

Quick Look in Apple Mac OS X 10.5.1 does not prevent a movie from accessing URLs when the movie file is previewed or if an icon is created, which might allow remote attackers to obtain sensitive information via HREFTrack...

CVE-2007-5857

Quick Look in Apple Mac OS X 10.5.1 does not prevent a movie from accessing URLs when the movie file is previewed or if an icon is created, which might allow remote attackers to obtain sensitive information via HREFTrack...

CVE-2007-5857

The CVE-2007-5857 issue affects Apple Mac OS X 10.5.1 and is tied to Quick Look, where a movie file preview or icon may access URLs via HREFTrack, potentially exposing sensitive information. Connected sources corroborate the association with Mac OS X 10.5.1 and the need for remediation through se...

Apple QuickTime HREFTrack crossite scripting

Script can refer to local resources. Vulnerability is used in-the-wild for malware code installation...

MOAB-03-01-2007: Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability

Summary A month ago, a vulnerability in QuickTime was exploited to spread a worm in MySpace. The vulnerability was first published by pdp. In his article, pdp describes how HREFTrack attribute in .mov files can be used for malicious scripting. The MySpace worm abused this vulnerability in a...

MOAB-03-01-2007.rb.txt

!/usr/bin/ruby c 2006 LMH Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the fake FTP server required. HTTP server port can be modified but it's not recommended. Adjust as...

Apple Quicktime <= 7.1.3 (HREFTrack) Cross-Zone Scripting Exploit

Exploit for macOS platform in category remote exploits ================================================================= Apple Quicktime Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for...

Apple QuickTime 7.1.3 - HREFTrack Cross-Zone Scripting

Apple QuickTime 7.1.3 - HREFTrack Cross-Zone Scripting !/usr/bin/ruby c 2006 LMH Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the fake FTP server required. HTTP server port can ...