VYPR
Unrated severityNVD Advisory· Published Jul 15, 2007· Updated Apr 23, 2026

CVE-2007-2402

CVE-2007-2402

Description

QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.

Affected products

12
  • cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

9

News mentions

0

No linked articles in our index yet.