Published: 24/04/2007 Updated: 16/10/2018

CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9

VMScore: 775

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote malicious users to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory when creating QTPointerRef objects, as demonstrated during the "PWN 2 0WN" contest at CanSecWest 2007.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple safari

source: wwwsecurityfocuscom/bid/23608/info QuickTime is prone to a vulnerability that may aid in the remote compromise of a vulnerable computer The issue occurs when a Java-enabled browser is used to view a malicious website QuickTime must also be installed Attackers may exploit this issue to execute arbitrary code in the context of ...

## # $Id: qtjava_pointerrb 10394 2010-09-20 08:06:27Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' clas ...

## # $Id$ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote # # This ...

NVD-CWE-Other http://cansecwest.com/post/2007-04-20-14:54:00.First_Mac_Hacked_Cancel_Or_Allow http://www.matasano.com/log/806/hot-off-the-matasano-sms-queue-cansec-macbook-challenge-won/http://www.theregister.co.uk/2007/04/20/pwn-2-own_winner/http://www.matasano.com/log/812/breaking-macbook-vuln-in-quicktime-affects-win32-apple-code/http://www.securitytracker.com/id?1017950 http://www.zerodayinitiative.com/advisories/ZDI-07-023.html http://docs.info.apple.com/article.html?artnum=305446 http://lists.apple.com/archives/security-announce/2007/May/msg00001.html http://www.kb.cert.org/vuls/id/420668 http://www.osvdb.org/34178 https://exchange.xforce.ibmcloud.com/vulnerabilities/33827 http://www.securityfocus.com/archive/1/467319/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/29884/https://www.kb.cert.org/vuls/id/420668

CVE-2007-2175

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect