CVE-2007-2388

EPSS 6.68%
Published 29.05.2007 21:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations.

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Quicktime Version7.1.6 Editionjava

   Apple ≫ macOS X
   Apple ≫ macOS X Version10.0
   Apple ≫ macOS X Version10.0.1
   Apple ≫ macOS X Version10.0.2
   Apple ≫ macOS X Version10.0.3
   Apple ≫ macOS X Version10.0.4
   Apple ≫ macOS X Version10.1
   Apple ≫ macOS X Version10.1.1
   Apple ≫ macOS X Version10.1.2
   Apple ≫ macOS X Version10.1.3
   Apple ≫ macOS X Version10.1.4
   Apple ≫ macOS X Version10.1.5
   Apple ≫ macOS X Version10.2
   Apple ≫ macOS X Version10.2.1
   Apple ≫ macOS X Version10.2.2
   Apple ≫ macOS X Version10.2.3
   Apple ≫ macOS X Version10.2.4
   Apple ≫ macOS X Version10.2.5
   Apple ≫ macOS X Version10.2.6
   Apple ≫ macOS X Version10.2.7
   Apple ≫ macOS X Version10.2.8
   Apple ≫ macOS X Version10.3
   Apple ≫ macOS X Version10.3.1
   Apple ≫ macOS X Version10.3.2
   Apple ≫ macOS X Version10.3.3
   Apple ≫ macOS X Version10.3.4
   Apple ≫ macOS X Version10.3.5
   Apple ≫ macOS X Version10.3.6
   Apple ≫ macOS X Version10.3.7
   Apple ≫ macOS X Version10.3.8
   Apple ≫ macOS X Version10.3.9
   Apple ≫ macOS X Version10.4
   Apple ≫ macOS X Version10.4.1
   Apple ≫ macOS X Version10.4.2
   Apple ≫ macOS X Version10.4.3
   Apple ≫ macOS X Version10.4.4
   Apple ≫ macOS X Version10.4.5
   Apple ≫ macOS X Version10.4.6
   Apple ≫ macOS X Version10.4.7
   Apple ≫ macOS X Version10.4.8
   Apple ≫ macOS X Version10.4.9
   Microsoft ≫ All Windows

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.