Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote malicious users to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apple quicktime 7.1.6 |