CVE-2007-4381 Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions....
HighCVSS 9.3
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jdk | <= 1.5.0 | No fix listed |
| sun jre | <= 1.4.2 | No fix listed |
| sun sdk | <= 1.4.2_14 | No fix listed |
References
- BEA07-177.00 vendor-advisory
- docs.info.apple.com
- APPLE-SA-2007-12-14 vendor-advisory
- SUSE-SA:2008:025 vendor-advisory
- 26402 third-party-advisory
- 26631 third-party-advisory
- 26933 third-party-advisory
- 27203 third-party-advisory
- 27716 third-party-advisory
- 28056 third-party-advisory
- 28115 third-party-advisory
- 28777 third-party-advisory
- 28880 third-party-advisory
- 29340 third-party-advisory
- 29897 third-party-advisory
- 103024 vendor-advisory
- support.novell.com
- GLSA-200709-15 vendor-advisory
- RHSA-2007:0956 vendor-advisory
- RHSA-2007:1086 vendor-advisory
- RHSA-2008:0100 vendor-advisory
- RHSA-2008:0132 vendor-advisory
- 25340 vdb-entry
- 1018576 vdb-entry
- ADV-2007-2910 vdb-entry
- ADV-2007-3009 vdb-entry
- ADV-2007-4224 vdb-entry
- sun-java-font-privilege-escalation(36061) vdb-entry
- oval:org.mitre.oval:def:10290 signature vdb-entry