Description (CNA)
QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/26034
- http://www.securitytracker.com/id?1018373
- http://osvdb.org/36131
- http://www.us-cert.gov/cas/techalerts/TA07-193A.html
- http://www.vupen.com/english/advisories/2007/2510
- http://www.securityfocus.com/bid/24873
- http://docs.info.apple.com/article.html?artnum=305947
- http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35361
ADP enrichment
No English description supplied.
- http://secunia.com/advisories/26034
- http://www.securitytracker.com/id?1018373
- http://osvdb.org/36131
- http://www.us-cert.gov/cas/techalerts/TA07-193A.html
- http://www.vupen.com/english/advisories/2007/2510
- http://www.securityfocus.com/bid/24873
- http://docs.info.apple.com/article.html?artnum=305947
- http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35361