Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) CoreVideo.dll, (2) CoreGraphics.dll, or (3) CoreAudioToolbox.dll that is located in the same folder as a .pic image file. Per: http://cwe.mitre.org/data/definitions/426.html
"CWE-426: Untrusted Search Path"
Publication date: Fri, 27 Dec 2013 07:55:00 +0000