CVE-2007-5045

CVE-2007-5045 describes an argument injection in Apple QuickTime 7.1.5 and earlier when used with Mozilla Firefox

FreeBSD : mozilla -- code execution via Quicktime media-link files (3ce8c7e2-66cf-11dc-b25f-02e0185f8d72)

The Mozilla Foundation reports a vulnerability within the mozilla browser. This vulnerability also affects various other browsers like firefox and SeaMonkey. The vulnerability is caused by QuickTime Media-Link files that contain a qtnext attribute. This could allow an attacker to start the browse...

Firefox < 2.0.0.7 Apple QuickTime Plug-In .qtl File qtnext Field Cross-context Scripting

The installed version of Firefox may allow a remote attacker to run script commands subject to the user's privileges via 'qtnext' attributes in QuickTime Media-Link files. Note that this issue can be exploited even if support for JavaScript in the browser has been disabled. C Tenable Network...

aqt-exploit.txt

...

Apple Quicktime /w IE .qtl Version XAS Remote Exploit PoC

No description provided by source. !-- Performing XAS Cross Application Scripting attacks automatically read "no user interaction" is very easy, as I showed before in my "shutting down skype" proof-of-concept...

Apple QuickTime /w IE .qtl Version XAS - Remote

milw0rm.com 2007-09-18...

Apple QuickTime w IE .qtl Version XAS - Remote

Apple QuickTime w IE .qtl Version XAS - Remote milw0rm.com 2007-09-18...

Apple Quicktime /w IE .qtl Version XAS Remote Exploit PoC

Exploit for unknown platform in category remote exploits ========================================================= Apple Quicktime /w IE .qtl Version XAS Remote Exploit PoC ========================================================= embed sr...

Code execution via QuickTime Media-link files — Mozilla

On his blog Petko D. Petkov reported that QuickTime Media-Link files contain a qtnext attribute that could be used on Windows systems to launch the default browser with arbitrary command-line options. When the default browser is Firefox 2.0.0.6 or earlier use of the -chrome option allowed a remot...

mozilla -- code execution via Quicktime media-link files

The Mozilla Foundation reports a vulnerability within the mozilla browser. This vulnerability also affects various other browsers like firefox and seamonkey. The vulnerability is caused by QuickTime Media-Link files that contain a qtnext attribute. This could allow an attacker to start the browse...

Apple Quicktime (Multiple Browsers) Command Execution PoC (0day)

No description provided by source. !-- http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox It seams that QuickTime media formats can hack into Firefox. The result of this vulnerability can lead to full compromise of the browser and maybe even the underlaying operating system. ...

appleqt-exec.txt

...

Apple Quicktime code execution

It's possible to execute script in browser's system context...

0DAY: QuickTime pwns Firefox

0DAY: QuickTime pwns Firefox published: September 12th, 2007 It seams that QuickTime media formats can hack into Firefox. The result of this vulnerability can lead to full compromise of the browser and maybe even the underlaying operating system. Don’t try this at home. 300 movie trailer Before w...

Apple QuickTime remote command execution vulnerability

Overview Apple QuickTime contains a vulnerability that may allow an attacker to pass arbitrary commands to other applications. Description Apple QuickTime is a media player that is available for Microsoft Windows and Apple OS X. Apple QuickTime includes browser plugins for Internet Explorer,...

Apple Quicktime (Multiple Browsers) Command Execution PoC (0day)

Exploit for multiple platform in category remote exploits ================================================================ Apple Quicktime Multiple Browsers Command Execution PoC 0day ================================================================ 0day.today 2018-01-06...

Apple QuickTime (Multiple Browsers) - Command Execution

milw0rm.com 2007-09-12...

Apple QuickTime (Multiple Browsers) - Command Execution

Apple QuickTime Multiple Browsers - Command Execution milw0rm.com 2007-09-12...

Apple Quicktime &lt; 7.2 SMIL Remote Integer Overflow PoC

No description provided by source. ---------------------------------------------------------------------- ATTACK VECTORS ---------------------------------------------------------------------- This vulnerability can be triggered by luring a target user into...

apple-overflow.txt

---------------------------------------------------------------------- ATTACK VECTORS ---------------------------------------------------------------------- This vulnerability can be triggered by luring a target user into running a malicious SMIL file locally or via a webpage. In the later scenar...