PT-2007-5142 · Oracle · Java Runtime Environment+1

Publicado 2007-07-20 · Atualizado 2017-09-29 · CVE-2007-3922

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Java Runtime Environment (JRE) versions 1.4.2 14 and earlier Java Runtime Environment (JRE) versions 5.0 Update 11 and earlier Java Runtime Environment (JRE) versions 6 through 6 Update 1

Description: The issue allows remote attackers to violate the security model for an applet's outbound connections by connecting to certain localhost services running on the machine that loaded the applet. This occurs due to an unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader.

Recommendations: For Java Runtime Environment (JRE) versions 1.4.2 14 and earlier, update to a version later than 1.4.2 14. For Java Runtime Environment (JRE) versions 5.0 Update 11 and earlier, update to a version later than 5.0 Update 11. For Java Runtime Environment (JRE) versions 6 through 6 Update 1, update to a version later than 6 Update 1.

Correção

Identificadores relacionados

CVE-2007-3922

RHSA-2007:0818

RHSA-2007:0829

RHSA-2008:0133

Produtos afetados

Java Platform

Java Runtime Environment

Referências · 32

• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.486841 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2007_56_ibmjava.html · Aviso do Fabricante
• http://securitytracker.com/id?1018428 · Nota
• http://secunia.com/advisories/26314 · Nota
• http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html · Aviso do Fabricante
• http://dev2dev.bea.com/pub/advisory/248 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2008-0133.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10387 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3922 · Nota de Segurança
• http://vupen.com/english/advisories/2007/3861 · Nota
• http://frsirt.com/english/advisories/2007/2573 · Nota
• http://redhat.com/support/errata/RHSA-2007-0818.html · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102995-1 · Aviso do Fabricante
• http://secunia.com/advisories/26369 · Nota
• http://vupen.com/english/advisories/2007/3009 · Nota