Lucene search

K
cve[email protected]CVE-2007-3922
HistoryJul 21, 2007 - 12:30 a.m.

CVE-2007-3922

2007-07-2100:30:00
web.nvd.nist.gov
26
cve-2007-3922
java
runtime environment
jre
applet
class loader
sun jdk
jre 5.0
security vulnerability
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

89.0%

Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applet’s outbound connections by connecting to certain localhost services running on the machine that loaded the applet.

Affected configurations

NVD
Node
sunjdkRange1.5.0update9
OR
sunjdkRange1.6.0update1
OR
sunjreRange1.5.0update11
OR
sunjreRange1.6.0update1
OR
sunsdkRange1.4.2_14

References

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

89.0%