CVE-2007-2388

EPSS 6.68%
Veröffentlicht 29.05.2007 21:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Quicktime Version7.1.6 Editionjava

   Apple ≫ macOS X
   Apple ≫ macOS X Version10.0
   Apple ≫ macOS X Version10.0.1
   Apple ≫ macOS X Version10.0.2
   Apple ≫ macOS X Version10.0.3
   Apple ≫ macOS X Version10.0.4
   Apple ≫ macOS X Version10.1
   Apple ≫ macOS X Version10.1.1
   Apple ≫ macOS X Version10.1.2
   Apple ≫ macOS X Version10.1.3
   Apple ≫ macOS X Version10.1.4
   Apple ≫ macOS X Version10.1.5
   Apple ≫ macOS X Version10.2
   Apple ≫ macOS X Version10.2.1
   Apple ≫ macOS X Version10.2.2
   Apple ≫ macOS X Version10.2.3
   Apple ≫ macOS X Version10.2.4
   Apple ≫ macOS X Version10.2.5
   Apple ≫ macOS X Version10.2.6
   Apple ≫ macOS X Version10.2.7
   Apple ≫ macOS X Version10.2.8
   Apple ≫ macOS X Version10.3
   Apple ≫ macOS X Version10.3.1
   Apple ≫ macOS X Version10.3.2
   Apple ≫ macOS X Version10.3.3
   Apple ≫ macOS X Version10.3.4
   Apple ≫ macOS X Version10.3.5
   Apple ≫ macOS X Version10.3.6
   Apple ≫ macOS X Version10.3.7
   Apple ≫ macOS X Version10.3.8
   Apple ≫ macOS X Version10.3.9
   Apple ≫ macOS X Version10.4
   Apple ≫ macOS X Version10.4.1
   Apple ≫ macOS X Version10.4.2
   Apple ≫ macOS X Version10.4.3
   Apple ≫ macOS X Version10.4.4
   Apple ≫ macOS X Version10.4.5
   Apple ≫ macOS X Version10.4.6
   Apple ≫ macOS X Version10.4.7
   Apple ≫ macOS X Version10.4.8
   Apple ≫ macOS X Version10.4.9
   Microsoft ≫ All Windows

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.