CVE-2017-2218

7.8HIGH

Key Information:

Vendor
Apple
Status
Installer Of Quicktime For Windows
Vendor
CVE Published:
7 July 2017

Summary

Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected Version(s)

Installer of QuickTime for Windows all versions

References

https://jvn.jp/en/jp/JVN94771799/index.html
third-party-advisoryx_refsource_JVN
https://support.apple.com/kb/DL837?viewlocale=en_US
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.