CVE-2011-0187

The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect.

Affected products

Macos X, Apple Quicktime

Apple Quicktime

< 7.7.0

CVSS 2.0

4.3 MEDIUM

EPSS

2.0% (79th percentile)

NVD status

Modified

Published

2011-03-23