Untrusted Search Path Vulnerability in QuickTime Installer by Apple
CVE-2017-2218

7.8HIGH

Key Information:

Vendor

Apple
Status
Installer Of Quicktime For Windows
Vendor
CVE Published:
7 July 2017

What is CVE-2017-2218?

An untrusted search path vulnerability exists in the Installer of QuickTime for Windows. This flaw could allow an attacker to gain elevated privileges if a malicious DLL is placed in a location that the installer accesses. This kind of attack could enable the execution of arbitrary code or manipulation of sensitive operations, highlighting the importance of secure file handling and system configurations to mitigate such risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Installer of QuickTime for Windows all versions

References

https://jvn.jp/en/jp/JVN94771799/index.html
third-party-advisoryx_refsource_JVN
https://support.apple.com/kb/DL837?viewlocale=en_US
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.