Lucene search

[email protected]CVE-2007-2396

HistoryJul 15, 2007 - 9:30 p.m.

CVE-2007-2396

2007-07-1521:30:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-2396

jdirect support

quicktime

java

apple

remote code execution

crafted java applets

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.06 Low

EPSS

Percentile

93.4%

JSON

The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.

CPENameOperatorVersion
apple:quicktimeapple quicktimeeq7.0.3
apple:quicktimeapple quicktimeeq7.1.5
apple:quicktimeapple quicktimeeq7.0.1
apple:quicktimeapple quicktimeeq7.0
apple:quicktimeapple quicktimeeq7.0.2
apple:quicktimeapple quicktimeeq7.0.4
apple:quicktimeapple quicktimeeq7.1.2
apple:quicktimeapple quicktimeeq7.1
apple:quicktimeapple quicktimeeq7.1.1
apple:quicktimeapple quicktimeeq7.1.4

CPE	Name	Operator	Version
apple:quicktime	apple quicktime	eq	7.0.3
apple:quicktime	apple quicktime	eq	7.1.5
apple:quicktime	apple quicktime	eq	7.0.1
apple:quicktime	apple quicktime	eq	7.0
apple:quicktime	apple quicktime	eq	7.0.2
apple:quicktime	apple quicktime	eq	7.0.4
apple:quicktime	apple quicktime	eq	7.1.2
apple:quicktime	apple quicktime	eq	7.1
apple:quicktime	apple quicktime	eq	7.1.1
apple:quicktime	apple quicktime	eq	7.1.4

Rows per page:

1-10 of 121

References

docs.info.apple.com/article.html?artnum=305947

lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html

osvdb.org/36133

secunia.com/advisories/26034

www.securityfocus.com/bid/24873

www.securitytracker.com/id?1018373

www.us-cert.gov/cas/techalerts/TA07-193A.html

www.vupen.com/english/advisories/2007/2510

exchange.xforce.ibmcloud.com/vulnerabilities/35360

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.06 Low

EPSS

Percentile

93.4%

JSON

Related for CVE-2007-2396

prion1 nessus2 seebug1