CVE-2007-2393 — Apple Quicktime vulnerability

3 documents3 sources
Severity
9.3CRITICALNVD
EPSS
15.8%
top 5.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Quicktime
Timeline
PublishedJul 15
Latest updateMay 1

Description

The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDapple/quicktime11 versions+10

Patches

Patch: docs.info.apple.com ↗Patch: lists.apple.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-fmp6-6vj9-c43j: The design of QuickTime for Java in Apple Quicktime before 7↗2022-05-01
▶
CVEList
CVE-2007-2393: The design of QuickTime for Java in Apple Quicktime before 7↗2007-07-15
▶
CVE-2007-2393 — Apple Quicktime vulnerability | cvebase