Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-2435
HistoryMay 02, 2007 - 10:19 a.m.

CVE-2007-2435

2007-05-0210:19:00
CWE-264
[email protected]
web.nvd.nist.gov
10

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.032

Percentile

91.2%

JSON

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to “Incorrect Use of System Classes” and probably related to support for JNLP files.

Affected configurations

Nvd
Node
sunjava_enterprise_systemRange≤5.0update10
OR
sunjreRange≤1.4.2update13
OR
sunjreRange≤1.5.0update10
OR
sunsdkRange≤1.4.3_13
VendorProductVersionCPE
sunjava_enterprise_system*cpe:2.3:a:sun:java_enterprise_system:*:update10:*:*:*:*:*:*
sunjre*cpe:2.3:a:sun:jre:*:update13:*:*:*:*:*:*
sunjre*cpe:2.3:a:sun:jre:*:update10:*:*:*:*:*:*
sunsdk*cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*

References

Related

prion 1
jvn 1
nessus 10
cvelist 1
cve 1
ubuntucve 1
openvas 10
gentoo 3
securityvulns 2
redhat 4
prion
prion
Design/Logic Flaw
2007-05-02 10:19:00
jvn
jvn
JVN#44724673: Java Web Start vulnerable to execution of unauthorized system classes
2007-05-08 00:00:00
nessus
nessus
Sun Java Web Start Unauthorized Access (102881)
2007-05-02 00:00:00
Sun Java Web Start Unauthorized Access (102881) (Unix)
2013-02-22 00:00:00
GLSA-200706-08 : emul-linux-x86-java: Multiple vulnerabilities
2007-06-27 00:00:00
cvelist
cvelist
CVE-2007-2435
2007-05-02 10:00:00
cve
cve
CVE-2007-2435
2007-05-02 10:19:00
ubuntucve
ubuntucve
CVE-2007-2435
2007-05-02 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200706-08 (emul-linux-x86-java)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200705-23 (sun-jdk, sun-jre-bin)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200705-23 (sun-jdk,sun-jre-bin)
2008-09-24 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2007-05-31 00:00:00
emul-linux-x86-java: Multiple vulnerabilities
2007-06-26 00:00:00
Sun JDK/JRE: Multiple vulnerabilities
2008-04-17 00:00:00
securityvulns
securityvulns
Sun JRE / JDK multiple security vulnerabilities
2007-06-01 00:00:00
[ GLSA 200705-23 ] Sun JDK/JRE: Multiple vulnerabilities
2007-06-01 00:00:00
redhat
redhat
(RHSA-2007:0817) Critical: java-1.4.2-ibm security update
2007-08-06 00:00:00
(RHSA-2007:0829) Critical: java-1.5.0-ibm security update
2007-08-07 00:00:00
(RHSA-2008:0524) Low: Red Hat Network Satellite Server security update
2008-06-30 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.032

Percentile

91.2%

JSON
Related for NVD:CVE-2007-2435
prion1jvn1nessus10cvelist1cve1ubuntucve1openvas10gentoo3securityvulns2redhat4