Collected research
Backdooring MP3 Files
pdp shows QuickTime Media Link (.qtl) XML accepts a qtnext attribute holding any URL, javascript: included, and QuickTime honours the file whatever its extension, so a .mp3, .mp4 or .m4a can be XML that runs script. With iTunes installed any mp3 link opens the QuickTime plugin. The code lands in about:blank, which he wrongly speculates is privileged.
Record
- Researcher
- pdp
- Published by
- gnucitizen.org
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of pdp, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .