CVE-2007-5239

2007-10-0600:00:00

ubuntu.com

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

0.006 Low

EPSS

Percentile

78.6%

JSON

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0
Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE
1.3.1_20 and earlier does not properly enforce access restrictions for
untrusted (1) applications and (2) applets, which allows user-assisted
remote attackers to copy or rename arbitrary files when local users perform
drag-and-drop operations from the untrusted application or applet window
onto certain types of desktop applications.

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchsun-java5< 1.5.0-13-0ubuntu1UNKNOWN
ubuntu8.04noarchsun-java5< 1.5.0-13-0ubuntu1UNKNOWN
ubuntu8.10noarchsun-java5< 1.5.0-13-0ubuntu1UNKNOWN
ubuntu9.04noarchsun-java5< 1.5.0-13-0ubuntu1UNKNOWN
ubuntu7.10noarchsun-java6< 6-03-0ubuntu2UNKNOWN
ubuntu8.04noarchsun-java6< 6-03-0ubuntu2UNKNOWN
ubuntu8.10noarchsun-java6< 6-03-0ubuntu2UNKNOWN
ubuntu9.04noarchsun-java6< 6-03-0ubuntu2UNKNOWN
ubuntu9.10noarchsun-java6< 6-03-0ubuntu2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	7.10	noarch	sun-java5	< 1.5.0-13-0ubuntu1	UNKNOWN
ubuntu	8.04	noarch	sun-java5	< 1.5.0-13-0ubuntu1	UNKNOWN
ubuntu	8.10	noarch	sun-java5	< 1.5.0-13-0ubuntu1	UNKNOWN
ubuntu	9.04	noarch	sun-java5	< 1.5.0-13-0ubuntu1	UNKNOWN
ubuntu	7.10	noarch	sun-java6	< 6-03-0ubuntu2	UNKNOWN
ubuntu	8.04	noarch	sun-java6	< 6-03-0ubuntu2	UNKNOWN
ubuntu	8.10	noarch	sun-java6	< 6-03-0ubuntu2	UNKNOWN
ubuntu	9.04	noarch	sun-java6	< 6-03-0ubuntu2	UNKNOWN
ubuntu	9.10	noarch	sun-java6	< 6-03-0ubuntu2	UNKNOWN