CVE-2007-2396

The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.

Link	Resource
http://docs.info.apple.com/article.html?artnum=305947	Patch
http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html	Patch
http://www.securityfocus.com/bid/24873
http://secunia.com/advisories/26034	Patch Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA07-193A.html	US Government Resource
http://www.securitytracker.com/id?1018373
http://osvdb.org/36133
http://www.vupen.com/english/advisories/2007/2510
https://exchange.xforce.ibmcloud.com/vulnerabilities/35360

Configuration 1

cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*

---

Published : 2007-07-15 09:30

Updated : 2018-10-30 04:25

---

NVD link : CVE-2007-2396

Mitre link : CVE-2007-2396

No products.

NVD-CWE-Other