Unscored CVE-2008-1585 EUVD-2008-1586GHSA-4qhm-v7jj-gh6g

Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in vid…

Published Jun 10, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in video files, which sends these URIs to explorer.exe and thereby allows remote attackers to execute arbitrary programs, as originally demonstrated by crafted file: URLs.

References

http://www.zerodayinitiative.com/advisories/ZDI-08-038/
quicktime-quicktime-content-code-execution(42948) vdb-entry
29650 vdb-entry
ADV-2008-2064 vdb-entry
TA08-162C third-party-advisory
31034 third-party-advisory
20080610 ZDI-08-038: QuickTime SMIL qtnext Redirect File Execution mailing-list
1020217 vdb-entry
APPLE-SA-2008-07-10 vendor-advisory
APPLE-SA-2008-06-09 vendor-advisory
29293 third-party-advisory
ADV-2008-1776 vdb-entry
VU#132419 third-party-advisory
29619 vdb-entry
http://support.apple.com/kb/HT1991