VULNERABILITY INTELLIGENCE

CVE-2007-2388

CVSS score9.3 HIGH
EPSS probability5.97%
CISA KEVNot currently listed
Published2007-05-29
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations.

Primary references