Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-2435
HistoryMay 02, 2007 - 10:19 a.m.

CVE-2007-2435

2007-05-0210:19:00
CWE-264
[email protected]
web.nvd.nist.gov
31
cve-2007-2435
sun java
web start
jdk
jre 5.0
vulnerability
nvd
unauthorized actions
system classes
jnlp files

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.032 Low

EPSS

Percentile

91.2%

JSON

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to “Incorrect Use of System Classes” and probably related to support for JNLP files.

Affected configurations

NVD
Node
sunjava_enterprise_systemRange≤5.0update10
OR
sunjreRange≤1.4.2update13
OR
sunjreRange≤1.5.0update10
OR
sunsdkRange≤1.4.3_13

References

Related

cvelist 1
nessus 10
jvn 1
prion 1
ubuntucve 1
nvd 1
openvas 10
gentoo 3
securityvulns 2
redhat 4
cvelist
cvelist
CVE-2007-2435
2007-05-02 10:00:00
nessus
nessus
Sun Java Web Start Unauthorized Access (102881)
2007-05-02 00:00:00
Sun Java Web Start Unauthorized Access (102881) (Unix)
2013-02-22 00:00:00
GLSA-200705-23 : Sun JDK/JRE: Multiple vulnerabilities
2007-06-04 00:00:00
jvn
jvn
JVN#44724673: Java Web Start vulnerable to execution of unauthorized system classes
2007-05-08 00:00:00
prion
prion
Design/Logic Flaw
2007-05-02 10:19:00
ubuntucve
ubuntucve
CVE-2007-2435
2007-05-02 00:00:00
nvd
nvd
CVE-2007-2435
2007-05-02 10:19:00
openvas
openvas
Gentoo Security Advisory GLSA 200706-08 (emul-linux-x86-java)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200705-23 (sun-jdk, sun-jre-bin)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200706-08 (emul-linux-x86-java)
2008-09-24 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2007-05-31 00:00:00
emul-linux-x86-java: Multiple vulnerabilities
2007-06-26 00:00:00
Sun JDK/JRE: Multiple vulnerabilities
2008-04-17 00:00:00
securityvulns
securityvulns
Sun JRE / JDK multiple security vulnerabilities
2007-06-01 00:00:00
[ GLSA 200705-23 ] Sun JDK/JRE: Multiple vulnerabilities
2007-06-01 00:00:00
redhat
redhat
(RHSA-2007:0817) Critical: java-1.4.2-ibm security update
2007-08-06 00:00:00
(RHSA-2007:0829) Critical: java-1.5.0-ibm security update
2007-08-07 00:00:00
(RHSA-2008:0524) Low: Red Hat Network Satellite Server security update
2008-06-30 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.032 Low

EPSS

Percentile

91.2%

JSON
Related for CVE-2007-2435
cvelist1nessus10jvn1prion1ubuntucve1nvd1openvas10gentoo3securityvulns2redhat4