medium6.8
CVE-2008-1013
Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a…
Impact
Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Quicktime | through 7.4.4 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29650
- http://securitytracker.com/id?1019757
- http://support.apple.com/kb/HT1241
- http://www.securityfocus.com/bid/28583
- http://www.us-cert.gov/cas/techalerts/TA08-094A.html
- http://www.vupen.com/english/advisories/2008/1078
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41601
- http://secunia.com/advisories/29650
- http://securitytracker.com/id?1019757
- http://support.apple.com/kb/HT1241
- http://www.securityfocus.com/bid/28583
- http://www.us-cert.gov/cas/techalerts/TA08-094A.html
- http://www.vupen.com/english/advisories/2008/1078
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41601