XML file with .MOV extension allows to execute script in local zone with qtnext parameter of EMBED tag with embedded short movie.
vulners.com/securityvulns/securityvulns:doc:15389