CVE-2007-2397

QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets.

Link	Resource
http://docs.info.apple.com/article.html?artnum=305947	Patch
http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html	Patch
http://www.securityfocus.com/bid/24873
http://secunia.com/advisories/26034	Patch Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA07-193A.html	US Government Resource
http://www.securitytracker.com/id?1018373
http://osvdb.org/36132
http://www.vupen.com/english/advisories/2007/2510
https://exchange.xforce.ibmcloud.com/vulnerabilities/35358

Configuration 1

cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*

---

Published : 2007-07-15 09:30

Updated : 2018-10-30 04:25

---

NVD link : CVE-2007-2397

Mitre link : CVE-2007-2397

No products.

NVD-CWE-Other