CVE:CVE-2007-5045
CNNVD:CNNVD-200709-336
Apple QuickTime存在Argument 注入漏洞,当涉及Mozilla Firefox 2.0.0.7 之前版本在系统上运行安装时，远程攻击者可以借助嵌入 XML元素和包含Firefox "-chrome"向量的一个qtnext参数的QuickTime Media Link (QTL)文件执行任意指令。
solution:Upgrade apple quicktime to a higher version than 7.1.5,and avoid the version (,7.1.5]; Upgrade mozilla firefox to a higher version than 2.0.0.6,and avoid the version (,2.0.0.6]
solution:Upgrade airdefense airsensor to a higher version than m520,and avoid the version m520