CVE-2007-0059

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie (.MOV) with an HREF Track (HREFTrack) that contains an automatic action tag with a local URI, which is executed in a local zone during preview, as exploited by a MySpace worm.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://docs.info.apple.com/article.html?artnum=305149
http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html
http://osvdb.org/31164
http://projects.info-pull.com/moab/MOAB-03-01-2007.html	Exploit
http://www.gnucitizen.org/blog/backdooring-quicktime-movies/	Vendor Advisory
http://www.kb.cert.org/vuls/id/304064	US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:apple:quicktime::::::::
	cpe:2.3:a:apple:quicktime:3.0:::::::*

History

No history.

Information

Published : 2007-01-05 00:28

Updated : 2018-10-30 16:25

NVD link : CVE-2007-0059

Mitre link : CVE-2007-0059

CVE.ORG link : CVE-2007-0059

JSON object : View

Products Affected

apple

quicktime

CWE

NVD-CWE-Other

{"id": "CVE-2007-0059", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-01-05T00:28:00.000", "references": [{"url": "http://docs.info.apple.com/article.html?artnum=305149", "source": "cve@mitre.org"}, {"url": "http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/31164", "source": "cve@mitre.org"}, {"url": "http://projects.info-pull.com/moab/MOAB-03-01-2007.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.gnucitizen.org/blog/backdooring-quicktime-movies/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/304064", "tags": ["US Government Resource"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie (.MOV) with an HREF Track (HREFTrack) that contains an automatic action tag with a local URI, which is executed in a local zone during preview, as exploited by a MySpace worm."}, {"lang": "es", "value": "Vulnerabilidad de secuencias de comandos en zonas cruzadas en Apple Quicktime 3 hasta 7.1.3 permite a atacantes remotos con la ayuda del usuario ejecutar c\u00f3digo de su elecci\u00f3n y listar contenidos del sistema de ficheros mediante un pel\u00edcula QuickTime (.MOV) con una pista HREF (HREFTrack) que contiene una etiqueta de acci\u00f3n autom\u00e1tica con una URI local, que se ejecuta en una zona local durante la previsualizaci\u00f3n, tal y como se explota por un gusano MySpace."}], "lastModified": "2018-10-30T16:25:17.370", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B57D423B-5763-45AA-899F-09A553E962BD", "versionEndIncluding": "7.1.3"}, {"criteria": "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8F310A8-F760-4059-987D-42369F360DE4"}], "operator": "OR"}]}], "vendorComments": [{"comment": "This issue is addressed in QuickTime 7.1.5, which was released on March 5. Information on the security fixes provided in QuickTime 7.1.5, and links to obtain the update are provided in:\nhttp://docs.info.apple.com/article.html?artnum=305149", "lastModified": "2007-03-19T00:00:00", "organization": "Apple"}], "sourceIdentifier": "cve@mitre.org"}