CVE-2007-2435

2007-05-0200:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.033 Low

EPSS

Percentile

91.2%

JSON

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web
Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to
perform unauthorized actions via an application that grants privileges to
itself, related to “Incorrect Use of System Classes” and probably related
to support for JNLP files.