{"id":"CVE-2007-2393","state":"PUBLISHED","title":"The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly le","description":"The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.","publishedAt":"2007-07-15T21:00:00.000Z","updatedAt":"2024-08-07T13:33:28.583Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://secunia.com/advisories/26034","http://www.securitytracker.com/id?1018373","http://www.us-cert.gov/cas/techalerts/TA07-193A.html","http://www.vupen.com/english/advisories/2007/2510","http://www.securityfocus.com/bid/24873","http://docs.info.apple.com/article.html?artnum=305947","https://exchange.xforce.ibmcloud.com/vulnerabilities/35359","http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html","http://osvdb.org/36135"],"weaknesses":[],"ingestedAt":"2026-10-29T19:38:30.562Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2007/2xxx/CVE-2007-2393.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2007-2393","state":"PUBLISHED","datePublished":"2007-07-15T21:00:00.000Z","dateUpdated":"2024-08-07T13:33:28.583Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2007-04-30T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://secunia.com/advisories/26034","name":"26034","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securitytracker.com/id?1018373","name":"1018373","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-193A.html","name":"TA07-193A","tags":["third-party-advisory","x_refsource_CERT"]},{"url":"http://www.vupen.com/english/advisories/2007/2510","name":"ADV-2007-2510","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.securityfocus.com/bid/24873","name":"24873","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://docs.info.apple.com/article.html?artnum=305947","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35359","name":"quicktime-java-applet-code-execution(35359)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html","name":"APPLE-SA-2007-07-11","tags":["vendor-advisory","x_refsource_APPLE"]},{"url":"http://osvdb.org/36135","name":"36135","tags":["vdb-entry","x_refsource_OSVDB"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2007-07-11T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-2393","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"26034","refsource":"SECUNIA","url":"http://secunia.com/advisories/26034"},{"name":"1018373","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1018373"},{"name":"TA07-193A","refsource":"CERT","url":"http://www.us-cert.gov/cas/techalerts/TA07-193A.html"},{"name":"ADV-2007-2510","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/2510"},{"name":"24873","refsource":"BID","url":"http://www.securityfocus.com/bid/24873"},{"name":"http://docs.info.apple.com/article.html?artnum=305947","refsource":"CONFIRM","url":"http://docs.info.apple.com/article.html?artnum=305947"},{"name":"quicktime-java-applet-code-execution(35359)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35359"},{"name":"APPLE-SA-2007-07-11","refsource":"APPLE","url":"http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html"},{"name":"36135","refsource":"OSVDB","url":"http://osvdb.org/36135"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://secunia.com/advisories/26034","name":"26034","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securitytracker.com/id?1018373","name":"1018373","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-193A.html","name":"TA07-193A","tags":["third-party-advisory","x_refsource_CERT","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/2510","name":"ADV-2007-2510","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/24873","name":"24873","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://docs.info.apple.com/article.html?artnum=305947","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35359","name":"quicktime-java-applet-code-execution(35359)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html","name":"APPLE-SA-2007-07-11","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://osvdb.org/36135","name":"36135","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T13:33:28.583Z"}}]}}}