CVE-2007-2396: Critical severity QuickTime Player vulnerability
Published Jul 15, 2007
·Updated
The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.
Affected Software
12 affected components
QuickTime Player
QuickTime Player=7.0
QuickTime Player=7.0.1
QuickTime Player=7.0.2
QuickTime Player=7.0.3
QuickTime Player=7.0.4
QuickTime Player=7.1
QuickTime Player=7.1.1
QuickTime Player=7.1.2
QuickTime Player=7.1.3
QuickTime Player=7.1.4
QuickTime Player=7.1.5
Remediation
Patch Available
Patch Available
Event History
Jul 15, 2007
CVE Published
09:30 PM
Jul 16, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2396?
CVE-2007-2396 is considered a critical vulnerability that allows remote code execution.
2
How do I fix CVE-2007-2396?
To fix CVE-2007-2396, upgrade Apple QuickTime to version 7.2 or later.
3
Which versions of QuickTime are affected by CVE-2007-2396?
CVE-2007-2396 affects Apple QuickTime versions 7.0.1 through 7.1.5 and earlier.
4
What type of attacks can exploit CVE-2007-2396?
CVE-2007-2396 can be exploited by attackers using crafted Java applets to execute arbitrary code.
5
Is it safe to use QuickTime versions affected by CVE-2007-2396?
Using affected versions of QuickTime may expose your system to security risks including remote code execution.