CVE-2007-2402

Description

QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient access control, which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.

Risk Information

Base Score

4.3

MODERATE

Vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

1.166

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in QuickTime 7.1.5	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234