Description
Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not clear potentially sensitive memory before use, which allows remote attackers to read memory from a web browser via unknown vectors related to Java applets.
References
- APPLE-SA-2007-05-29 vendor-advisory
- VU#434748 third-party-advisory
- ADV-2007-1974 vdb-entry
- 1018136 vdb-entry
- quicktime-applet-information-disclosure(34571) vdb-entry
- 25130 third-party-advisory
- 35575 vdb-entry
- 24222 vdb-entry