The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in video files, which sends these URIs to explorer.exe and thereby allows remote attackers to execute arbitrary programs, as originally demonstrated by crafted file: URLs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Quicktime | — | Upgrade to Apple QuickTime version 7.5.0 | Oct 25, 2010 | Jun 10, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub