CVE

Id
28402  
CVE No.
CVE-2007-5045  
Status
Candidate  
Description
Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute arbitrary commands via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter containing the Firefox "-chrome" argument. NOTE: this is a related issue to CVE-2006-4965 and the result of an incomplete fix for CVE-2007-3670.  
Phase
Assigned (20070923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295142 28402 CVE-2007-5045 BUGTRAQ:20070912 0DAY: QuickTime pwns Firefox  View
295143 28402 CVE-2007-5045 URL:http://www.securityfocus.com/archive/1/archive/1/479179/100/0/threaded  View
295144 28402 CVE-2007-5045 MISC:http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox  View
295145 28402 CVE-2007-5045 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=395942  View
295146 28402 CVE-2007-5045 CONFIRM:http://www.mozilla.org/security/announce/2007/mfsa2007-28.html  View
295147 28402 CVE-2007-5045 HP:HPSBUX02153  View
295148 28402 CVE-2007-5045 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742  View
295149 28402 CVE-2007-5045 HP:SSRT061181  View
295150 28402 CVE-2007-5045 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742  View
295151 28402 CVE-2007-5045 SUNALERT:201516  View
295152 28402 CVE-2007-5045 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1  View
295153 28402 CVE-2007-5045 SUSE:SUSE-SA:2007:057  View
295154 28402 CVE-2007-5045 URL:http://www.novell.com/linux/security/advisories/2007_57_mozilla.html  View
295155 28402 CVE-2007-5045 OVAL:oval:org.mitre.oval:def:5896  View
295156 28402 CVE-2007-5045 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5896  View
295157 28402 CVE-2007-5045 VUPEN:ADV-2007-3197  View
295158 28402 CVE-2007-5045 URL:http://www.vupen.com/english/advisories/2007/3197  View
295159 28402 CVE-2007-5045 SECUNIA:26881  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57445 JVNDB-2007-006137 Norton Internet Security におけるサービス運用妨害 (DoS) の脆弱性 Norton Internet Security は、System Service Descriptor Table (SSDT) 関数ハンドラへの特定のパラメータを適切に検証しないため、サービス運用妨害 (クラッシュ) 状態となる、および権限を取得される脆弱性が存在します。 CVE-2007-5047 28402 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006137.html  View