CVEvulnerability

CVE-2007-2435

10.0 HIGH Published 2007-05-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-05-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264

Description

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.

Affected configurations

• sun java enterprise system (<= 5.0) • sun jre (<= 1.4.2) • sun jre (<= 1.5.0) • sun sdk (<= 1.4.3 13)

Related

Weakness · not in database (1)

References