{"api_version":"1","generated_at":"2026-07-23T09:40:02+00:00","cve":"CVE-2006-4965","urls":{"html":"https://cve.report/CVE-2006-4965","api":"https://cve.report/api/cve/CVE-2006-4965.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-4965","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4965"},"summary":{"title":"CVE-2006-4965","description":"Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain.  NOTE: as of 20070912, this issue has been demonstrated by using instances of Components.interfaces.nsILocalFile and Components.interfaces.nsIProcess to execute arbitrary local files within Firefox and possibly Internet Explorer.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-09-25 00:07:00","updated_at":"2018-10-17 21:40:00"},"problem_types":["CWE-94"],"metrics":[],"references":[{"url":"http://www.securityfocus.com/archive/1/446750/100/0/threaded","name":"20060920 Backdooring MP3 files (plus QuickTime issues and Cross-context Scripting)","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/1631","name":"1631","refsource":"SREASON","tags":[],"title":"SecurityReason - Backdooring MP3 files (plus QuickTime issues and Cross-context Scripting)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1018687","name":"1018687","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - QuickTime 'qtnext' Parameter Lets Remote Users Execute Arbitrary Commands","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22048","name":"22048","refsource":"SECUNIA","tags":["Exploit","Vendor Advisory"],"title":"Apple QuickTime Plug-In Local Resource Linking Weakness - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox","name":"http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox","refsource":"MISC","tags":[],"title":"0DAY QuickTime pwns Firefox","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.securityfocus.com/archive/1/479179/100/0/threaded","name":"20070912 0DAY: QuickTime pwns Firefox","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/453756/100/0/threaded","name":"20061207 New MySpace worm could be on its way","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html","name":"APPLE-SA-2007-03-05","refsource":"APPLE","tags":[],"title":"APPLE-SA-2007-03-05 QuickTime 7.1.5","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/751808","name":"VU#751808","refsource":"CERT-VN","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#751808","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up","name":"http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up","refsource":"MISC","tags":[],"title":"MySpace QuickTime Worm Follow-up","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/3155","name":"ADV-2007-3155","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/20138","name":"20138","refsource":"BID","tags":["Exploit"],"title":"Apple QuickTime Plug-In Arbitrary Script Execution Weakness","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.gnucitizen.org/blog/backdooring-mp3-files/","name":"http://www.gnucitizen.org/blog/backdooring-mp3-files/","refsource":"MISC","tags":["Exploit"],"title":"Backdooring MP3 Files","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://docs.info.apple.com/article.html?artnum=305149","name":"http://docs.info.apple.com/article.html?artnum=305149","refsource":"CONFIRM","tags":[],"title":"About the security content of QuickTime 7.1.5","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/27414","name":"27414","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"SUSE update for MozillaFirefox, mozilla, and seamonkey - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4965","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4965","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"4965","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"quicktime","cpe6":"7.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4965","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"quicktime","cpe6":"7.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-4965","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain.  NOTE: as of 20070912, this issue has been demonstrated by using instances of Components.interfaces.nsILocalFile and Components.interfaces.nsIProcess to execute arbitrary local files within Firefox and possibly Internet Explorer."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1631","refsource":"SREASON","url":"http://securityreason.com/securityalert/1631"},{"name":"VU#751808","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/751808"},{"name":"27414","refsource":"SECUNIA","url":"http://secunia.com/advisories/27414"},{"name":"20070912 0DAY: QuickTime pwns Firefox","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/479179/100/0/threaded"},{"name":"1018687","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1018687"},{"name":"http://www.gnucitizen.org/blog/backdooring-mp3-files/","refsource":"MISC","url":"http://www.gnucitizen.org/blog/backdooring-mp3-files/"},{"name":"20061207 New MySpace worm could be on its way","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/453756/100/0/threaded"},{"name":"APPLE-SA-2007-03-05","refsource":"APPLE","url":"http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html"},{"name":"ADV-2007-3155","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/3155"},{"name":"20138","refsource":"BID","url":"http://www.securityfocus.com/bid/20138"},{"name":"20060920 Backdooring MP3 files (plus QuickTime issues and Cross-context Scripting)","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/446750/100/0/threaded"},{"name":"http://docs.info.apple.com/article.html?artnum=305149","refsource":"CONFIRM","url":"http://docs.info.apple.com/article.html?artnum=305149"},{"name":"http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox","refsource":"MISC","url":"http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox"},{"name":"22048","refsource":"SECUNIA","url":"http://secunia.com/advisories/22048"},{"name":"http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up","refsource":"MISC","url":"http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up"}]}},"nvd":{"publishedDate":"2006-09-25 00:07:00","lastModifiedDate":"2018-10-17 21:40:00","problem_types":["CWE-94"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5},"severity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"4965","Ordinal":"20307","Title":"CVE-2006-4965","CVE":"CVE-2006-4965","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"4965","Ordinal":"1","NoteData":"Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain.  NOTE: as of 20070912, this issue has been demonstrated by using instances of Components.interfaces.nsILocalFile and Components.interfaces.nsIProcess to execute arbitrary local files within Firefox and possibly Internet Explorer.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"4965","Ordinal":"2","NoteData":"2006-09-24","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"4965","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}