Description
The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.
References
- 26034 third-party-advisory
- 1018373 vdb-entry
- 36133 vdb-entry
- TA07-193A third-party-advisory
- ADV-2007-2510 vdb-entry
- 24873 vdb-entry
- http://docs.info.apple.com/article.html?artnum=305947
- quicktime-jdirect-code-execution(35360) vdb-entry
- APPLE-SA-2007-07-11 vendor-advisory