CVE-2007-2397 — Apple Quicktime vulnerability

3 documents3 sources
Severity
9.3CRITICALNVD
EPSS
33.0%
top 3.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Quicktime
Timeline
PublishedJul 15
Latest updateMay 1

Description

QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDapple/quicktime11 versions+10

Patches

Patch: docs.info.apple.com ↗Patch: lists.apple.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-m3f9-6m4r-6x2c: QuickTime for Java in Apple Quicktime before 7↗2022-05-01
▶
CVEList
CVE-2007-2397: QuickTime for Java in Apple Quicktime before 7↗2007-07-15
▶
CVE-2007-2397 — Apple Quicktime vulnerability | cvebase