Lucene search

K
cve[email protected]CVE-2007-3655
HistoryJul 10, 2007 - 7:30 p.m.

CVE-2007-3655

2007-07-1019:30:00
CWE-119
web.nvd.nist.gov
137
cve-2007-3655
security
buffer overflow
remote code execution
java web start
jnlp

7.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.944 High

EPSS

Percentile

99.2%

Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file.

CPENameOperatorVersion
sun:jresun jreeq1.5.0
sun:jresun jreeq1.6.0

References

7.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.944 High

EPSS

Percentile

99.2%