Lucene search
+L

2 matches found

Zero Day Initiative
Zero Day Initiative
•added 2007/05/01 12:00 a.m.•42 views

Apple QTJava toQTPointer() Pointer Arithmetic Memory Overwrite Vulnerability

This vulnerability allows attackers to execute arbitrary code on systems with vulnerable installations of Apple's QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The flaw exists within the QuickTime Java extensions QTJava.dll,...

7.6CVSS5.4AI score0.83804EPSS
SaveExploits5References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/24 12:00 a.m.•3 views

CVE-2007-2175: Undefined Security Weakness

Apple QuickTime Java extensions QTJava.dll, as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory when creating...

7.6CVSS6.5AI score0.83804EPSS
SaveExploits5References1
Rows per page
Query Builder