Schemes requiring little user interaction could exploit a QuickTime vulnerability on any Java-enabled web browser with the media player installed, including Internet Explorer (IE) 6 and 7 on Microsoft's Windows XP and Vista operating systems, according to researchers.