CVEvulnerability

CVE-2007-4381

9.3 HIGH Published 2007-08-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-08-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.

Affected configurations

• sun jdk (<= 1.5.0) • sun jre (<= 1.4.2) • sun sdk (<= 1.4.2 14)

References