CVEvulnerability
CVE-2007-2396
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.
Affected configurations
• apple quicktime
• apple quicktime 7.0
• apple quicktime 7.0.1
• apple quicktime 7.0.2
• apple quicktime 7.0.3
• apple quicktime 7.0.4
• apple quicktime 7.1
• apple quicktime 7.1.1
• apple quicktime 7.1.2
• apple quicktime 7.1.3
• apple quicktime 7.1.4
• apple quicktime 7.1.5
References
- http://docs.info.apple.com/article.html?artnum=305947 Patch
- http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html Patch
- http://osvdb.org/36133 osvdb.org
- http://secunia.com/advisories/26034 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/24873 www.securityfocus.com
- http://www.securitytracker.com/id?1018373 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-193A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2510 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35360 exchange.xforce.ibmcloud.com
- http://docs.info.apple.com/article.html?artnum=305947 Patch
- http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html Patch
- http://osvdb.org/36133 osvdb.org
- http://secunia.com/advisories/26034 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/24873 www.securityfocus.com
- http://www.securitytracker.com/id?1018373 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-193A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2510 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35360 exchange.xforce.ibmcloud.com