CVE-2007-4673 Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file. NOTE: th...
HighCVSS 9.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file. NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | = 7.2 | No fix listed |
References
- docs.info.apple.com
- APPLE-SA-2007-10-03 vendor-advisory
- 40434 vdb-entry
- 25913 patch vdb-entry
- quicktime-qtl-code-execution(36937) vdb-entry