CVE-2007-5689 The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Updat...
HighCVSS 10.0
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jdk | <= 1.6.0 | No fix listed |
| sun jdk | = 1.5.0-update1 | No fix listed |
| sun jdk | = 1.5.0-update10 | No fix listed |
| sun jdk | = 1.5.0-update11 | No fix listed |
| sun jdk | = 1.5.0-update12 | No fix listed |
| sun jdk | = 1.5.0-update2 | No fix listed |
| sun jdk | = 1.5.0-update3 | No fix listed |
| sun jdk | = 1.5.0-update4 | No fix listed |
| sun jdk | = 1.5.0-update5 | No fix listed |
| sun jdk | = 1.5.0-update7 | No fix listed |
| sun jdk | = 1.5.0-update8 | No fix listed |
| sun jdk | = 1.5.0-update9 | No fix listed |
| sun jdk | = 1.6.0-update1 | No fix listed |
| sun jre | <= 1.3.1 | No fix listed |
| sun jre | <= 1.4.2 | No fix listed |
| sun jre | <= 1.5.0 | No fix listed |
| sun jre | = 1.3.0 | No fix listed |
| sun jre | = 1.3.0-update5 | No fix listed |
| sun jre | = 1.3.1-update1 | No fix listed |
| sun jre | = 1.3.1-update16 | No fix listed |
| sun jre | = 1.3.1-update18 | No fix listed |
| sun jre | = 1.3.1-update19 | No fix listed |
| sun jre | = 1.3.1-update1a | No fix listed |
| sun jre | = 1.4 | No fix listed |
| sun jre | = 1.4.1-update3 | No fix listed |
Show 39 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.4.2 | No fix listed |
| sun jre | = 1.4.2_1 | No fix listed |
| sun jre | = 1.4.2_3 | No fix listed |
| sun jre | = 1.4.2_8 | No fix listed |
| sun jre | = 1.4.2_9 | No fix listed |
| sun jre | = 1.4.2_10 | No fix listed |
| sun jre | = 1.4.2_11 | No fix listed |
| sun jre | = 1.4.2_12 | No fix listed |
| sun jre | = 1.4.2_13 | No fix listed |
| sun jre | = 1.4.2_14 | No fix listed |
| sun jre | = 1.5.0-update1 | No fix listed |
| sun jre | = 1.5.0-update10 | No fix listed |
| sun jre | = 1.5.0-update11 | No fix listed |
| sun jre | = 1.5.0-update2 | No fix listed |
| sun jre | = 1.5.0-update3 | No fix listed |
| sun jre | = 1.5.0-update4 | No fix listed |
| sun jre | = 1.5.0-update5 | No fix listed |
| sun jre | = 1.5.0-update6 | No fix listed |
| sun jre | = 1.5.0-update7 | No fix listed |
| sun jre | = 1.5.0-update8 | No fix listed |
| sun jre | = 1.5.0-update9 | No fix listed |
| sun jre | = 1.6.0-update_1 | No fix listed |
| sun jre | = 1.6.0-update_2 | No fix listed |
| sun sdk | <= 1.4.2_15 | No fix listed |
| sun sdk | = 1.3.1_01 | No fix listed |
| sun sdk | = 1.3.1_01a | No fix listed |
| sun sdk | = 1.3.1_16 | No fix listed |
| sun sdk | = 1.3.1_18 | No fix listed |
| sun sdk | = 1.3.1_19 | No fix listed |
| sun sdk | = 1.3.1_20 | No fix listed |
| sun sdk | = 1.4.2 | No fix listed |
| sun sdk | = 1.4.2_03 | No fix listed |
| sun sdk | = 1.4.2_08 | No fix listed |
| sun sdk | = 1.4.2_09 | No fix listed |
| sun sdk | = 1.4.2_10 | No fix listed |
| sun sdk | = 1.4.2_11 | No fix listed |
| sun sdk | = 1.4.2_12 | No fix listed |
| sun sdk | = 1.4.2_13 | No fix listed |
| sun sdk | = 1.4.2_14 | No fix listed |
References
- BEA08-198.00 vendor-advisory
- HPSBUX02284 vendor-advisory
- 40834 vdb-entry
- 27320 patch third-party-advisory vendor-advisory
- 27693 third-party-advisory
- 29042 third-party-advisory
- 29858 third-party-advisory
- 30676 third-party-advisory
- 30780 third-party-advisory
- GLSA-200804-28 vendor-advisory
- 103112 patch vendor-advisory
- support.avaya.com
- GLSA-200804-20 vendor-advisory
- GLSA-200806-11 vendor-advisory
- 26185 vdb-entry
- 1018847 vdb-entry
- www.vmware.com
- ADV-2007-3589 vdb-entry
- ADV-2007-3895 vdb-entry
- ADV-2008-0609 vdb-entry
- ADV-2008-1856 vdb-entry
- oval:org.mitre.oval:def:9898 signature vdb-entry