CVE-2007-2397

EPSS 38.25%
Published 15.07.2007 21:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets.

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Quicktime Version-

Apple ≫ Quicktime Version7.0

Apple ≫ Quicktime Version7.0.1

Apple ≫ Quicktime Version7.0.2

Apple ≫ Quicktime Version7.0.3

Apple ≫ Quicktime Version7.0.4

Apple ≫ Quicktime Version7.1

Apple ≫ Quicktime Version7.1.1

Apple ≫ Quicktime Version7.1.2

Apple ≫ Quicktime Version7.1.3

Apple ≫ Quicktime Version7.1.4

Apple ≫ Quicktime Version7.1.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	38.25%	0.969

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://docs.info.apple.com/article.html?artnum=305947

Patch

http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html

Patch

http://secunia.com/advisories/26034

Patch

Vendor Advisory

http://www.securitytracker.com/id?1018373

http://www.us-cert.gov/cas/techalerts/TA07-193A.html

US Government Resource

http://www.vupen.com/english/advisories/2007/2510

http://www.securityfocus.com/bid/24873

http://osvdb.org/36132

https://exchange.xforce.ibmcloud.com/vulnerabilities/35358

https://nvd.nist.gov/vuln/detail/CVE-2007-2397

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2397

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2397

EUVD