CVE-2007-2402
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
5.5 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.2%
QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient “access control,” which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.
Affected configurations
References
docs.info.apple.com/article.html?artnum=305947
lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
osvdb.org/36131
secunia.com/advisories/26034
www.securityfocus.com/bid/24873
www.securitytracker.com/id?1018373
www.us-cert.gov/cas/techalerts/TA07-193A.html
www.vupen.com/english/advisories/2007/2510
exchange.xforce.ibmcloud.com/vulnerabilities/35361
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
5.5 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.2%