CVE-2007-5236

Published Oct 6, 2007

Last updated 6 years ago

Overview

Description
Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application.
Source
cve@mitre.org
NVD status
Modified

Risk scores

CVSS 2.0

Type
Primary
Base score
5.4
Impact score
6.9
Exploitability score
4.9
Vector string
AV:N/AC:H/Au:N/C:C/I:N/A:N

Weaknesses

nvd@nist.gov
CWE-264

Social media

Hype score
Not currently trending

Vendor comments

  • Red HatNot vulnerable. These issues do not affect Linux versions of Sun JDK or JRE.

Configurations