CVE-2007-2388

2007-05-29T17:30:00
ID CVE-2007-2388
Type cve
Reporter NVD
Modified 2011-05-18T00:00:00

Description

Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations.