CVE-2012-3751 in QuickTime
Zusammenfassung (Englisch)
Use-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with a crafted _qtactivex_ parameter in an OBJECT element.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservieren
19.06.2012
Veröffentlichung
09.11.2012
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 6906 | Apple QuickTime HTML Object Denial of Service | 399 | Proof-of-Concept | Offizieller Fix | CVE-2012-3751 |