Security Advisory

CVE-2007-2388

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2007-05-29 21:00:00

Last updated 2024-08-07 13:33:28

Assigner mitre

State PUBLISHED

Description

Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations.

← Browse all CVEs View on cve.org ↗