CVE-2007-2175
Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java...
Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory when creating QTPointerRef objects, as demonstrated during the "PWN 2 0WN" contest at CanSecWest 2007.
Exploit likelihood
What each source reports
NVD Score used
Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory when creating QTPointerRef objects, as demonstrated during the "PWN 2 0WN" contest at CanSecWest 2007.
- Record
CVE-2007-2175- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory when creating QTPointerRef objects, as demonstrated during the "PWN 2 0WN" contest at CanSecWest 2007.
- Record
CVE-2007-2175- Updated
- 2026-11-02
EUVDEUVD-2007-2170 No score
Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory when creating QTPointerRef objects, as demonstrated during the "PWN 2 0WN" contest at CanSecWest 2007.
- Record
EUVD-2007-2170- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v58r-vg3c-hjmm No score
Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java...
Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory when creating QTPointerRef objects, as demonstrated during the "PWN 2 0WN" contest at CanSecWest 2007.
- Record
GHSA-v58r-vg3c-hjmm- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Apple QTJava - 'toQTPointer()' Arbitrary Memory Access (Metasploit) | 2010-09-20 |
| Exploit-DB | Apple QuickTime 7.1.5 - QTJava toQTPointer() Java Handling Arbitrary Code Execution | 2007-04-23 |
| Exploit-DB | Apple QuickTime for Java 7 - Memory Access (Metasploit) | 2007-04-23 |
| Metasploit | Apple QTJava toQTPointer() Arbitrary Memory Access | 2007-04-23 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, Metasploit | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2175 is a high vulnerability (CVSS 7.6) in Apple Safari, published April 24, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 83.8%, the 99th percentile. No source names a fixed version.
References
zerodayinitiative.com/advisories/ZDI-07-023.html
cansecwest.com/post/2007-04-20-14:54:00.First_Mac_Hacked_Cancel_Or_Allow
exchange.xforce.ibmcloud.com/vulnerabilities/33827
securitytracker.com/id?1017950
lists.apple.com/archives/security-announce/2007/May/msg00001.html
theregister.co.uk/2007/04/20/pwn-2-own_winner
Show 8 moreShow less
docs.info.apple.com/article.html?artnum=305446
securityfocus.com/archive/1/467319/100/0/threaded
matasano.com/log/806/hot-off-the-matasano-sms-queue-cansec-macbook-challenge-won
osvdb.org/34178
kb.cert.org/vuls/id/420668
nvd.nist.gov/vuln/detail/CVE-2007-2175
github.com/advisories/GHSA-v58r-vg3c-hjmm