CVE-2007-3504 Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, for Windows allows r...
HighCVSS 9.3
EPSS 6.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, for Windows allows remote attackers to perform unauthorized actions via an application that grants file overwrite privileges to itself. NOTE: this can be leveraged to execute arbitrary code by overwriting a .java.policy file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jdk | <= 1.5.0 | No fix listed |
| sun jre | <= 1.4.2 | No fix listed |
| sun jre | <= 1.5.0 | No fix listed |
| sun sdk | <= 1.4.2_13 | No fix listed |
References
- docs.info.apple.com
- APPLE-SA-2007-12-14 vendor-advisory
- 37755 vdb-entry
- 25823 third-party-advisory vendor-advisory
- 28115 third-party-advisory vendor-advisory
- 102957 patch vendor-advisory
- 20070702 High Risk Flaw in Sun's Java Web Start mailing-list
- 24695 vdb-entry
- 1018328 vdb-entry
- ADV-2007-2384 vdb-entry vendor-advisory
- ADV-2007-4224 vdb-entry vendor-advisory
- javaweb-javapolicy-code-execution(35169) vdb-entry