VULNERABILITY INTELLIGENCE

CVE-2007-2397

CVSS score9.3 HIGH
EPSS probability6.88%
CISA KEVNot currently listed
Published2007-07-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets.

Primary references