EIP-2026-118274
PRE-CVEApple QuickTime /w IE .qtl Version XAS - Remote
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118274. PoCs published by Aviv Raff.
AI-analyzed exploit summary This exploit leverages QuickTime .qtl files to execute arbitrary commands via Firefox's '-chrome' command-line switch injection, enabling automated XAS (Cross Application Scripting) attacks in restricted web environments. It demonstrates shutting down Skype as a proof-of-concept.
Description
Apple QuickTime /w IE .qtl Version XAS - Remote
Exploits (1)
This exploit leverages QuickTime .qtl files to execute arbitrary commands via Firefox's '-chrome' command-line switch injection, enabling automated XAS (Cross Application Scripting) attacks in restricted web environments. It demonstrates shutting down Skype as a proof-of-concept.