CVE-2007-2397 QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets.
HighCVSS 9.3
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | All versions | No fix listed |
| apple quicktime | = 7.0 | No fix listed |
| apple quicktime | = 7.0.1 | No fix listed |
| apple quicktime | = 7.0.2 | No fix listed |
| apple quicktime | = 7.0.3 | No fix listed |
| apple quicktime | = 7.0.4 | No fix listed |
| apple quicktime | = 7.1 | No fix listed |
| apple quicktime | = 7.1.1 | No fix listed |
| apple quicktime | = 7.1.2 | No fix listed |
| apple quicktime | = 7.1.3 | No fix listed |
| apple quicktime | = 7.1.4 | No fix listed |
| apple quicktime | = 7.1.5 | No fix listed |
References
- docs.info.apple.com patch
- APPLE-SA-2007-07-11 patch vendor-advisory
- 36132 vdb-entry
- 26034 patch third-party-advisory vendor-advisory
- 24873 vdb-entry
- 1018373 vdb-entry
- TA07-193A third-party-advisory us-government-resource
- ADV-2007-2510 vdb-entry
- quicktime-applet-code-execution(35358) vdb-entry