NVD

Id
1529  
Name
CVE-2008-1585  
Description
Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in video files, which sends these URIs to explorer.exe and thereby allows remote attackers to execute arbitrary programs, as originally demonstrated by crafted file: URLs.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-06-10  
Modified Date
2011-03-07  
Seq
2008-1585  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
9905 1529 CVE-2008-1585 APPLE-SA-2008-07-10  View
9906 1529 CVE-2008-1585 APPLE-SA-2008-06-09  View
9907 1529 CVE-2008-1585 http://support.apple.com/kb/HT1991  View
9908 1529 CVE-2008-1585 VU#132419  View
9909 1529 CVE-2008-1585 20080610 ZDI-08-038: QuickTime SMIL qtnext Redirect File Execution  View
9910 1529 CVE-2008-1585 29619  View
9911 1529 CVE-2008-1585 29650  View
9912 1529 CVE-2008-1585 1020217  View
9913 1529 CVE-2008-1585 TA08-162C  View
9914 1529 CVE-2008-1585 ADV-2008-1776  View
9915 1529 CVE-2008-1585 ADV-2008-2064  View
9916 1529 CVE-2008-1585 http://www.zerodayinitiative.com/advisories/ZDI-08-038/  View
9917 1529 CVE-2008-1585 quicktime-quicktime-content-code-execution(42948)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46129 JVNDB-2008-001439 Apple QuickTime の file:URL の処理に任意のコード実行の脆弱性 Apple QuickTime には、file:URL を適切に処理できないため任意のコードが実行される脆弱性が存在します。 CVE-2008-1585 31698 CVE-2008-1585 1529 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001439.html 2008-06-11 2008-07-28 View