CVE-2007-2396 — Apple Quicktime vulnerability

3 documents3 sources
Severity
9.3CRITICALNVD
EPSS
24.5%
top 3.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Quicktime
Timeline
PublishedJul 15
Latest updateMay 1

Description

The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDapple/quicktime11 versions+10

Patches

Patch: docs.info.apple.com ↗Patch: lists.apple.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-j863-r7c3-8m9h: The JDirect support in QuickTime for Java in Apple Quicktime before 7↗2022-05-01
▶
CVEList
CVE-2007-2396: The JDirect support in QuickTime for Java in Apple Quicktime before 7↗2007-07-15
▶
CVE-2007-2396 — Apple Quicktime vulnerability | cvebase