CVEvulnerability
CVE-2007-2393
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.
Affected configurations
• apple quicktime
• apple quicktime 7.0
• apple quicktime 7.0.1
• apple quicktime 7.0.2
• apple quicktime 7.0.3
• apple quicktime 7.0.4
• apple quicktime 7.1
• apple quicktime 7.1.1
• apple quicktime 7.1.2
• apple quicktime 7.1.3
• apple quicktime 7.1.4
• apple quicktime 7.1.5
References
- http://docs.info.apple.com/article.html?artnum=305947 Patch
- http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html Patch
- http://osvdb.org/36135 osvdb.org
- http://secunia.com/advisories/26034 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/24873 www.securityfocus.com
- http://www.securitytracker.com/id?1018373 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-193A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2510 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35359 exchange.xforce.ibmcloud.com
- http://docs.info.apple.com/article.html?artnum=305947 Patch
- http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html Patch
- http://osvdb.org/36135 osvdb.org
- http://secunia.com/advisories/26034 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/24873 www.securityfocus.com
- http://www.securitytracker.com/id?1018373 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-193A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2510 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35359 exchange.xforce.ibmcloud.com