OSVDB ID: 35575

Title: Apple QuickTime Java Extension Unspecified Memory Disclosure

Info

Disclosure

May 29, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Quicktime contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered by Quicktime for Java, which will allow a maliciously crafted applet to access web browser memory and disclose sensitive information resulting in a loss of confidentiality.

Classification

Location: Local Access Required, Remote / Network Access
Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Exploit: Exploit Unknown
Disclosure: OSVDB Verified, Vendor Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability.

Products

Apple Computer, Inc.

QuickTime

7.1.6

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/35575