Quicktime crossite scripting
Published:		14.12.2006
Source:		MAXIMIZEDESIGNS
SecurityVulns ID:		6927
Type:		client
Level:		6/10
Description:		XML file with .MOV extension allows to execute script in local zone with qtnext parameter of EMBED tag with embedded short movie.

Affected:

APPLE : QuickTime 7.1

Original document

Maximize Designs, Unpatchable Quicktime XSS (14.12.2006)

Discuss:

Read or add your comments to this news (0 comments)