CVE-2007-2402

Description

QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/35361

http://www.vupen.com/english/advisories/2007/2510

http://www.us-cert.gov/cas/techalerts/TA07-193A.html

http://www.securitytracker.com/id?1018373

http://www.securityfocus.com/bid/24873

http://secunia.com/advisories/26034

http://osvdb.org/36131

http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html

http://docs.info.apple.com/article.html?artnum=305947

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3