Description
QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information (screen images) via a Java applet that accesses images that are being rendered by other embedded QuickTime objects.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.osvdb.org/32380 ↗
- http://securitytracker.com/id?1017402 ↗
- http://secunia.com/advisories/23438 ↗
- http://www.vupen.com/english/advisories/2006/5072 ↗
- http://www.securityfocus.com/bid/21672 ↗
- http://docs.info.apple.com/article.html?artnum=304916 ↗
- http://lists.apple.com/archives/Security-announce/2006/Dec/msg00000.html ↗