10

CVE-2007-5689

The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Jdk Update update2 Version <= 1.6.0
Sun ≫ Jdk Version 1.5.0 Update update1
Sun ≫ Jdk Version 1.5.0 Update update10
Sun ≫ Jdk Version 1.5.0 Update update11
Sun ≫ Jdk Version 1.5.0 Update update12
Sun ≫ Jdk Version 1.5.0 Update update2
Sun ≫ Jdk Version 1.5.0 Update update3
Sun ≫ Jdk Version 1.5.0 Update update4
Sun ≫ Jdk Version 1.5.0 Update update5
Sun ≫ Jdk Version 1.5.0 Update update7
Sun ≫ Jdk Version 1.5.0 Update update8
Sun ≫ Jdk Version 1.5.0 Update update9
Sun ≫ Jdk Version 1.6.0 Update update1
Sun ≫ Jre Update update20 Version <= 1.3.1
Sun ≫ Jre Update update15 Version <= 1.4.2
Sun ≫ Jre Update update12 Version <= 1.5.0
Sun ≫ Jre Version 1.3.0
Sun ≫ Jre Version 1.3.0 Update update5
Sun ≫ Jre Version 1.3.1 Update update1
Sun ≫ Jre Version 1.3.1 Update update16
Sun ≫ Jre Version 1.3.1 Update update18
Sun ≫ Jre Version 1.3.1 Update update19
Sun ≫ Jre Version 1.3.1 Update update1a
Sun ≫ Jre Version 1.4
Sun ≫ Jre Version 1.4.1 Update update3
Sun ≫ Jre Version 1.4.2
Sun ≫ Jre Version 1.4.2_1
Sun ≫ Jre Version 1.4.2_3
Sun ≫ Jre Version 1.4.2_8
Sun ≫ Jre Version 1.4.2_9
Sun ≫ Jre Version 1.4.2_10
Sun ≫ Jre Version 1.4.2_11
Sun ≫ Jre Version 1.4.2_12
Sun ≫ Jre Version 1.4.2_13
Sun ≫ Jre Version 1.4.2_14
Sun ≫ Jre Version 1.5.0 Update update1
Sun ≫ Jre Version 1.5.0 Update update10
Sun ≫ Jre Version 1.5.0 Update update11
Sun ≫ Jre Version 1.5.0 Update update2
Sun ≫ Jre Version 1.5.0 Update update3
Sun ≫ Jre Version 1.5.0 Update update4
Sun ≫ Jre Version 1.5.0 Update update5
Sun ≫ Jre Version 1.5.0 Update update6
Sun ≫ Jre Version 1.5.0 Update update7
Sun ≫ Jre Version 1.5.0 Update update8
Sun ≫ Jre Version 1.5.0 Update update9
Sun ≫ Jre Version 1.6.0 Update update_1
Sun ≫ Jre Version 1.6.0 Update update_2
Sun ≫ Sdk Version <= 1.4.2_15
Sun ≫ Sdk Version 1.3.1_01
Sun ≫ Sdk Version 1.3.1_01a
Sun ≫ Sdk Version 1.3.1_16
Sun ≫ Sdk Version 1.3.1_18
Sun ≫ Sdk Version 1.3.1_19
Sun ≫ Sdk Version 1.3.1_20
Sun ≫ Sdk Version 1.4.2
Sun ≫ Sdk Version 1.4.2_03
Sun ≫ Sdk Version 1.4.2_08
Sun ≫ Sdk Version 1.4.2_09
Sun ≫ Sdk Version 1.4.2_10
Sun ≫ Sdk Version 1.4.2_11
Sun ≫ Sdk Version 1.4.2_12
Sun ≫ Sdk Version 1.4.2_13
Sun ≫ Sdk Version 1.4.2_14
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.89% 0.911
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/29858
http://secunia.com/advisories/30780
http://security.gentoo.org/glsa/glsa-200804-28.xml
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
http://dev2dev.bea.com/pub/advisory/272
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533
http://secunia.com/advisories/27693
http://secunia.com/advisories/29042
http://secunia.com/advisories/30676
http://www.vmware.com/security/advisories/VMSA-2008-0010.html
http://www.vupen.com/english/advisories/2007/3895
http://www.vupen.com/english/advisories/2008/0609
http://www.vupen.com/english/advisories/2008/1856/references
http://osvdb.org/40834
http://secunia.com/advisories/27320
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103112-1
Patch
http://support.avaya.com/elmodocs2/security/ASA-2007-480.htm
http://www.securityfocus.com/bid/26185
http://www.securitytracker.com/id?1018847
http://www.vupen.com/english/advisories/2007/3589
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9898