CVE-2007-2393

EPSS 11.78%
Veröffentlicht 15.07.2007 21:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Quicktime Version-

Apple ≫ Quicktime Version7.0

Apple ≫ Quicktime Version7.0.1

Apple ≫ Quicktime Version7.0.2

Apple ≫ Quicktime Version7.0.3

Apple ≫ Quicktime Version7.0.4

Apple ≫ Quicktime Version7.1

Apple ≫ Quicktime Version7.1.1

Apple ≫ Quicktime Version7.1.2

Apple ≫ Quicktime Version7.1.3

Apple ≫ Quicktime Version7.1.4

Apple ≫ Quicktime Version7.1.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	11.78%	0.93

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://docs.info.apple.com/article.html?artnum=305947

Patch

http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html

Patch

http://secunia.com/advisories/26034

Patch

Vendor Advisory

http://www.securitytracker.com/id?1018373

http://www.us-cert.gov/cas/techalerts/TA07-193A.html

US Government Resource

http://www.vupen.com/english/advisories/2007/2510

http://www.securityfocus.com/bid/24873

http://osvdb.org/36135

https://exchange.xforce.ibmcloud.com/vulnerabilities/35359

https://nvd.nist.gov/vuln/detail/CVE-2007-2393

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2393

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2393

EUVD