CVE-2007-2396

EPSS 29.1%
Published 15.07.2007 21:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Quicktime Version-

Apple ≫ Quicktime Version7.0

Apple ≫ Quicktime Version7.0.1

Apple ≫ Quicktime Version7.0.2

Apple ≫ Quicktime Version7.0.3

Apple ≫ Quicktime Version7.0.4

Apple ≫ Quicktime Version7.1

Apple ≫ Quicktime Version7.1.1

Apple ≫ Quicktime Version7.1.2

Apple ≫ Quicktime Version7.1.3

Apple ≫ Quicktime Version7.1.4

Apple ≫ Quicktime Version7.1.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	29.1%	0.961

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://docs.info.apple.com/article.html?artnum=305947

Patch

http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html

Patch

http://secunia.com/advisories/26034

Patch

Vendor Advisory

http://www.securitytracker.com/id?1018373

http://www.us-cert.gov/cas/techalerts/TA07-193A.html

US Government Resource

http://www.vupen.com/english/advisories/2007/2510

http://www.securityfocus.com/bid/24873

http://osvdb.org/36133

https://exchange.xforce.ibmcloud.com/vulnerabilities/35360

https://nvd.nist.gov/vuln/detail/CVE-2007-2396

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2396

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2396

EUVD