Quicktime Security Vulnerabilities and Issues — Quicktime CVE List

Lucene search

AppleQuicktime

3 matches found

CVE•added 2007/05/29 9:30 p.m.•46 views

CVE-2007-2388

Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations.

9.3CVSS7.4AI score0.06027EPSS

CVE•added 2007/05/29 9:30 p.m.•46 views

CVE-2007-2389

Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not clear potentially sensitive memory before use, which allows remote attackers to read memory from a web browser via unknown vectors related to Java applets.

7.1CVSS6AI score0.0062EPSS

CVE•added 2007/05/14 9:19 p.m.•39 views

CVE-2007-0754

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor (STSD) atom size in a QuickTime movie.

9.3CVSS7.6AI score0.09626EPSS