CVE-2007-2396 The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.
HighCVSS 9.3
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | All versions | No fix listed |
| apple quicktime | = 7.0 | No fix listed |
| apple quicktime | = 7.0.1 | No fix listed |
| apple quicktime | = 7.0.2 | No fix listed |
| apple quicktime | = 7.0.3 | No fix listed |
| apple quicktime | = 7.0.4 | No fix listed |
| apple quicktime | = 7.1 | No fix listed |
| apple quicktime | = 7.1.1 | No fix listed |
| apple quicktime | = 7.1.2 | No fix listed |
| apple quicktime | = 7.1.3 | No fix listed |
| apple quicktime | = 7.1.4 | No fix listed |
| apple quicktime | = 7.1.5 | No fix listed |
References
- docs.info.apple.com patch
- APPLE-SA-2007-07-11 patch vendor-advisory
- 36133 vdb-entry
- 26034 patch third-party-advisory vendor-advisory
- 24873 vdb-entry
- 1018373 vdb-entry
- TA07-193A third-party-advisory us-government-resource
- ADV-2007-2510 vdb-entry
- quicktime-jdirect-code-execution(35360) vdb-entry