{"id":"CVE-2006-4965","published":"2006-09-25T00:00:00Z","modified":"2024-08-07T19:32:22Z","title":"Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly…","vendor":null,"product":null,"tier":"tail","description":{"text":"Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain.  NOTE: as of 20070912, this issue has been demonstrated by using instances of Components.interfaces.nsILocalFile and Components.interfaces.nsIProcess to execute arbitrary local files within Firefox and possibly Internet Explorer.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.13368,"percentile":0.96402,"provenance":"source"},"cwes":[],"references":[{"url":"http://securityreason.com/securityalert/1631","tags":["third-party-advisory","x_refsource_SREASON"]},{"url":"http://www.kb.cert.org/vuls/id/751808","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"http://secunia.com/advisories/27414","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/479179/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securitytracker.com/id?1018687","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.gnucitizen.org/blog/backdooring-mp3-files/","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/archive/1/453756/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html","tags":["vendor-advisory","x_refsource_APPLE"]},{"url":"http://www.vupen.com/english/advisories/2007/3155","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.securityfocus.com/bid/20138","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securityfocus.com/archive/1/446750/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://docs.info.apple.com/article.html?artnum=305149","tags":["x_refsource_CONFIRM"]},{"url":"http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox","tags":["x_refsource_MISC"]},{"url":"http://secunia.com/advisories/22048","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up","tags":["x_refsource_MISC"]}],"priority":{"score":24.3,"factors":[{"name":"EPSS percentile","points":19.28},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"exploitdb":{"count":1,"earliest":"2006-09-21"},"first":{"date":"2006-09-21","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/28639"},"provenance":"source"},"euvd":{"id":"EUVD-2006-4951","exploited":false,"provenance":"source"},"exploits":[{"id":28639,"url":"https://www.exploit-db.com/exploits/28639","title":"Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution","date":"2006-09-21","verified":true,"provenance":"source"}],"lineage":{"familyId":"fam-cve-2006-4965-family-cve-2006-4965","children":[{"from":"CVE-2006-4965","to":"CVE-2007-5045","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this is a related issue to CVE-2006-4965 and the result of an incomplete fix for CVE-2007-3670.","from":"CVE.org","in":"CVE-2007-5045"}]},{"from":"CVE-2006-4965","to":"CVE-2007-4673","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045.","from":"CVE.org","in":"CVE-2007-4673"}]}]}}