CVE-2007-3655 Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase at...
MediumCVSS 6.8
EPSS 12.3%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.5.0-update1 | No fix listed |
| sun jre | = 1.5.0-update10 | No fix listed |
| sun jre | = 1.5.0-update11 | No fix listed |
| sun jre | = 1.5.0-update2 | No fix listed |
| sun jre | = 1.5.0-update3 | No fix listed |
| sun jre | = 1.5.0-update4 | No fix listed |
| sun jre | = 1.5.0-update5 | No fix listed |
| sun jre | = 1.5.0-update6 | No fix listed |
| sun jre | = 1.5.0-update7 | No fix listed |
| sun jre | = 1.5.0-update8 | No fix listed |
| sun jre | = 1.5.0-update9 | No fix listed |
| sun jre | = 1.6.0-update_1 | No fix listed |
References
- docs.info.apple.com
- APPLE-SA-2007-12-14 vendor-advisory
- 20070711 SUN Java JNLP Overflow mailing-list
- 37756 vdb-entry
- research.eeye.com
- 25981 third-party-advisory vendor-advisory
- 26314 third-party-advisory vendor-advisory
- 26369 third-party-advisory vendor-advisory
- 27266 third-party-advisory vendor-advisory
- 28115 third-party-advisory vendor-advisory
- 29858 third-party-advisory vendor-advisory
- 30780 third-party-advisory vendor-advisory
- GLSA-200804-28 vendor-advisory
- 2874 third-party-advisory
- 102996 vendor-advisory
- 30284 exploit
- GLSA-200804-20 vendor-advisory
- GLSA-200806-11 vendor-advisory
- SUSE-SA:2007:056 vendor-advisory
- RHSA-2007:0818 vendor-advisory
- RHSA-2007:0829 vendor-advisory
- 20070709 EEYE: Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability mailing-list
- 20070711 SUN Java JNLP Overflow mailing-list
- 24832 exploit vdb-entry
- 1018346 vdb-entry
- ADV-2007-2477 vdb-entry vendor-advisory
- ADV-2007-4224 vdb-entry vendor-advisory
- sun-java-jnlp-bo(35320) vdb-entry
- oval:org.mitre.oval:def:11367 signature vdb-entry