CVE-2017-2218 Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
HighCVSS 7.8
EPSS 0.73%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | All versions | No fix listed |
| apple Installer of QuickTime for Windows | = all versions | No fix listed |
References
- JVN#94771799 third-party-advisory vdb-entry
- support.apple.com product