CVE-2007-2388

published 2007-05-29

CVE-2007-2388: Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code…

critical 9.3 CVSS 3.1

AV N AC M Au N C C I C A C

Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
apple	quicktime	—	—

CWE-264