CVE-2007-2397

EPSS 38.25%
Veröffentlicht 15.07.2007 21:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Quicktime Version-

Apple ≫ Quicktime Version7.0

Apple ≫ Quicktime Version7.0.1

Apple ≫ Quicktime Version7.0.2

Apple ≫ Quicktime Version7.0.3

Apple ≫ Quicktime Version7.0.4

Apple ≫ Quicktime Version7.1

Apple ≫ Quicktime Version7.1.1

Apple ≫ Quicktime Version7.1.2

Apple ≫ Quicktime Version7.1.3

Apple ≫ Quicktime Version7.1.4

Apple ≫ Quicktime Version7.1.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	38.25%	0.969

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://docs.info.apple.com/article.html?artnum=305947

Patch

http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html

Patch

http://secunia.com/advisories/26034

Patch

Vendor Advisory

http://www.securitytracker.com/id?1018373

http://www.us-cert.gov/cas/techalerts/TA07-193A.html

US Government Resource

http://www.vupen.com/english/advisories/2007/2510

http://www.securityfocus.com/bid/24873

http://osvdb.org/36132

https://exchange.xforce.ibmcloud.com/vulnerabilities/35358

https://nvd.nist.gov/vuln/detail/CVE-2007-2397

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2397

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2397

EUVD