CVE-2007-2393

EPSS 11.78%
Published 15.07.2007 21:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Quicktime Version-

Apple ≫ Quicktime Version7.0

Apple ≫ Quicktime Version7.0.1

Apple ≫ Quicktime Version7.0.2

Apple ≫ Quicktime Version7.0.3

Apple ≫ Quicktime Version7.0.4

Apple ≫ Quicktime Version7.1

Apple ≫ Quicktime Version7.1.1

Apple ≫ Quicktime Version7.1.2

Apple ≫ Quicktime Version7.1.3

Apple ≫ Quicktime Version7.1.4

Apple ≫ Quicktime Version7.1.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	11.78%	0.93

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://docs.info.apple.com/article.html?artnum=305947

Patch

http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html

Patch

http://secunia.com/advisories/26034

Patch

Vendor Advisory

http://www.securitytracker.com/id?1018373

http://www.us-cert.gov/cas/techalerts/TA07-193A.html

US Government Resource

http://www.vupen.com/english/advisories/2007/2510

http://www.securityfocus.com/bid/24873

http://osvdb.org/36135

https://exchange.xforce.ibmcloud.com/vulnerabilities/35359

https://nvd.nist.gov/vuln/detail/CVE-2007-2393

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2393

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2393

EUVD