CVE-2006-4965

Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain. NOTE: as of 20070912, this issue has been demonstrated by using instances of Components.interfaces.nsILocalFile and Components.interfaces.nsIProcess to execute arbitrary local files within Firefox and possibly Internet Explorer.

• CWE-94

• http://docs.info.apple.com/article.html?artnum=305149
• http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html
• http://secunia.com/advisories/22048Exploit, Vendor Advisory
• http://secunia.com/advisories/27414Vendor Advisory
• http://securityreason.com/securityalert/1631
• http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox
• http://www.gnucitizen.org/blog/backdooring-mp3-files/Exploit
• http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up
• http://www.kb.cert.org/vuls/id/751808US Government Resource
• http://www.securityfocus.com/archive/1/446750/100/0/threaded
• http://www.securityfocus.com/archive/1/453756/100/0/threaded
• http://www.securityfocus.com/archive/1/479179/100/0/threaded
• http://www.securityfocus.com/bid/20138Exploit
• http://www.securitytracker.com/id?1018687
• http://www.vupen.com/english/advisories/2007/3155
• http://docs.info.apple.com/article.html?artnum=305149
• http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html
• http://secunia.com/advisories/22048Exploit, Vendor Advisory
• http://secunia.com/advisories/27414Vendor Advisory
• http://securityreason.com/securityalert/1631
• http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox
• http://www.gnucitizen.org/blog/backdooring-mp3-files/Exploit
• http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up
• http://www.kb.cert.org/vuls/id/751808US Government Resource
• http://www.securityfocus.com/archive/1/446750/100/0/threaded
• http://www.securityfocus.com/archive/1/453756/100/0/threaded
• http://www.securityfocus.com/archive/1/479179/100/0/threaded
• http://www.securityfocus.com/bid/20138Exploit
• http://www.securitytracker.com/id?1018687
• http://www.vupen.com/english/advisories/2007/3155

Published

Sep 25, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4959Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 …
• CVE-2006-4960Cross-site scripting (XSS) vulnerability in index.php Php Bl…
• CVE-2006-4961SQL injection vulnerability in the GetModuleConfig function …
• CVE-2006-4962Directory traversal vulnerability in pbd_engine.php in Php B…
• CVE-2006-4963Directory traversal vulnerability in index.php in Exponent C…
• CVE-2006-4964Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0…
• CVE-2006-4966PHP remote file inclusion vulnerability in inc/ifunctions.ph…
• CVE-2006-4967Multiple cross-site scripting (XSS) vulnerabilities in NextA…
• CVE-2006-4968PHP remote file inclusion vulnerability in includes/function…
• CVE-2006-4969Multiple PHP remote file inclusion vulnerabilities in WAHM E…
• CVE-2006-4970PHP remote file inclusion vulnerability in enc/content.php i…
• CVE-2006-4971MyBB (aka MyBulletinBoard) allows remote attackers to obtain…