CVE-2007-2402

QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.

Link	Resource
http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html	Patch
http://www.securityfocus.com/bid/24873
http://secunia.com/advisories/26034	Patch Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA07-193A.html	US Government Resource
http://www.securitytracker.com/id?1018373
http://osvdb.org/36131
http://www.vupen.com/english/advisories/2007/2510
http://docs.info.apple.com/article.html?artnum=305947
https://exchange.xforce.ibmcloud.com/vulnerabilities/35361

Configuration 1

cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*

---

Published : 2007-07-15 09:30

Updated : 2018-10-30 04:25

---

NVD link : CVE-2007-2402

Mitre link : CVE-2007-2402

No products.

CWE-200