CVE-2007-2393: Apple Quicktime

High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days.

The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.

Affected products

• Apple Quicktime: affected versions not specified; version 7.0 only; version 7.0.1 only; version 7.0.2 only; version 7.0.3 only; version 7.0.4 only; …

Published 2007-07-15. Last modified 2026-06-16.