Description
QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.
Metrics
CVSS 2.0 4.3/10
AV:N/AC:M/Au:N/C:P/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://docs.info.apple.com/article.html?artnum=305947
- http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.htmlPatch
- http://osvdb.org/36131
- http://secunia.com/advisories/26034Patch, Vendor Advisory
- http://www.securityfocus.com/bid/24873
- http://www.securitytracker.com/id?1018373
- http://www.us-cert.gov/cas/techalerts/TA07-193A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/2510
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35361
- http://docs.info.apple.com/article.html?artnum=305947
- http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.htmlPatch
- http://osvdb.org/36131
- http://secunia.com/advisories/26034Patch, Vendor Advisory
- http://www.securityfocus.com/bid/24873
- http://www.securitytracker.com/id?1018373
- http://www.us-cert.gov/cas/techalerts/TA07-193A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/2510
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35361
Timeline
- Published
- Jul 15, 2007
- Last modified
- Jun 16, 2026
- NVD status
- Modified