Lucene search
HistoryMay 29, 2007 - 9:30 p.m.
CVE-2007-2388
cve-2007-2388
apple quicktime
java
remote code execution
security vulnerability
nvd
7.4 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.025 Low
EPSS
Percentile
90.2%
Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations.
Affected configurations
Node
applemac_os_x
ORapplemac_os_xMatch10.0
ORapplemac_os_xMatch10.0.1
ORapplemac_os_xMatch10.0.2
ORapplemac_os_xMatch10.0.3
ORapplemac_os_xMatch10.0.4
ORapplemac_os_xMatch10.1
ORapplemac_os_xMatch10.1.1
ORapplemac_os_xMatch10.1.2
ORapplemac_os_xMatch10.1.3
ORapplemac_os_xMatch10.1.4
ORapplemac_os_xMatch10.1.5
ORapplemac_os_xMatch10.2
ORapplemac_os_xMatch10.2.1
ORapplemac_os_xMatch10.2.2
ORapplemac_os_xMatch10.2.3
ORapplemac_os_xMatch10.2.4
ORapplemac_os_xMatch10.2.5
ORapplemac_os_xMatch10.2.6
ORapplemac_os_xMatch10.2.7
ORapplemac_os_xMatch10.2.8
ORapplemac_os_xMatch10.3
ORapplemac_os_xMatch10.3.1
ORapplemac_os_xMatch10.3.2
ORapplemac_os_xMatch10.3.3
ORapplemac_os_xMatch10.3.4
ORapplemac_os_xMatch10.3.5
ORapplemac_os_xMatch10.3.6
ORapplemac_os_xMatch10.3.7
ORapplemac_os_xMatch10.3.8
ORapplemac_os_xMatch10.3.9
ORapplemac_os_xMatch10.4
ORapplemac_os_xMatch10.4.1
ORapplemac_os_xMatch10.4.2
ORapplemac_os_xMatch10.4.3
ORapplemac_os_xMatch10.4.4
ORapplemac_os_xMatch10.4.5
ORapplemac_os_xMatch10.4.6
ORapplemac_os_xMatch10.4.7
ORapplemac_os_xMatch10.4.8
ORapplemac_os_xMatch10.4.9
ORmicrosoftall_windows
applequicktimeMatch7.1.6java
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:quicktime | apple quicktime | eq | 7.1.6 |
References
Related
nvd
nvd
CVE-2007-2388
2007-05-29 21:30:00
prion
prion
Memory corruption
2007-05-29 21:30:00
cert
cert
Apple QuickTime for Java security bypass vulnerability
2007-05-30 00:00:00
cvelist
cvelist
CVE-2007-2388
2007-05-29 21:00:00
nessus
nessus
QuickTime < 7.1.6 Security Update (Windows)
2007-05-30 00:00:00
Quicktime Multiple Vulnerabilities (Mac OS X 7.1.6 Security Update)
2007-05-30 00:00:00
QuickTime < 7.2 Multiple Vulnerabilities (Windows)
2007-07-12 00:00:00
7.4 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.025 Low
EPSS
Percentile
90.2%
Related for CVE-2007-2388