Description
The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.
References
- 26034 third-party-advisory
- 1018373 vdb-entry
- TA07-193A third-party-advisory
- ADV-2007-2510 vdb-entry
- 24873 vdb-entry
- http://docs.info.apple.com/article.html?artnum=305947
- quicktime-java-applet-code-execution(35359) vdb-entry
- APPLE-SA-2007-07-11 vendor-advisory
- 36135 vdb-entry