Description
Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file. NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045.
References
- 25913 vdb-entry
- http://docs.info.apple.com/article.html?artnum=306560
- 40434 vdb-entry
- APPLE-SA-2007-10-03 vendor-advisory
- quicktime-qtl-code-execution(36937) vdb-entry