Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain. NOTE: as of 20070912, this issue has been demonstrated by using instances of Components.interfaces.nsILocalFile and Components.interfaces.nsIProcess to execute arbitrary local files within Firefox and possibly Internet Explorer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-firefox-develUpgrade linux-firefoxUpgrade mozillaUpgrade linux-mozilla-develUpgrade linux-mozillaUpgrade seamonkeyUpgrade firefox-jaUpgrade linux-seamonkey-develUpgrade firefox | Dec 10, 2025 | Sep 19, 2007 |
| Mfsa2007 28 | — | Upgrade to Mozilla Firefox version 2.0.0.7 | Jun 14, 2012 | Sep 24, 2006 |
| Quicktime | — | Upgrade to Apple QuickTime version 7.1.5 | Oct 25, 2010 | Sep 24, 2006 |
| Suse | — | Upgrade seamonkey-ircUpgrade seamonkey-spellcheckerUpgrade mozilla-calendarUpgrade seamonkey-dom-inspectorUpgrade mozilla-mailUpgrade seamonkeyUpgrade suse-releaseUpgrade mozilla-deatUpgrade mozillaUpgrade mozilla-csUpgrade MozillaFirefoxUpgrade mozilla-venkmanUpgrade seamonkey-venkmanUpgrade seamonkey-mailUpgrade mozilla-huUpgrade mozilla-ircUpgrade MozillaFirefox-translationsUpgrade mozilla-dom-inspectorUpgrade mozilla-devel | Feb 17, 2015 | Sep 24, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub