Description
QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information (screen images) via a Java applet that accesses images that are being rendered by other embedded QuickTime objects.
References
- 32380 vdb-entry
- 1017402 vdb-entry
- 23438 third-party-advisory
- ADV-2006-5072 vdb-entry
- 21672 vdb-entry
- http://docs.info.apple.com/article.html?artnum=304916
- APPLE-SA-2006-12-19 vendor-advisory