Intrusion PreventionApple.QuickTime.qtl.File.XAS.Remote.Exploit
Description
This indicates a command injection vulnerability in Apple QuickTime. It allows remote attackers to inject arbitrary commands via the qtnext parameter within QuickTime link (.qtl) files.
Affected Products
Apple QuickTime versions 7.x
Impact
System compromise, arbitrary command execution.
Recommended Actions
Currently we are not aware of any official fix for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-12-11 | 16.978 |
| ID | 14991 |
| Created | Sep 19, 2007 |
| Updated | Dec 10, 2020 |
| Risk |
|
| CVE ID | CVE-2006-4965 |
| Exploit Prediction Score | 1.98% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, MacOS |
| Affected App | Apple |