CVE-2008-1013

Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet.

Date published : 2008-04-04

http://www.securityfocus.com/bid/28583

http://www.us-cert.gov/cas/techalerts/TA08-094A.html