PT-2007-5562 · Sun · Sdk+2

Publicado 2007-08-17 · Atualizado 2017-09-29 · CVE-2007-4381

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun JDK and JRE versions 5.0 Update 9 and earlier Sun SDK and JRE versions 1.4.2 14 and earlier

Description The issue is related to an unspecified vulnerability in the font parsing implementation, which allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.

Recommendations For Sun JDK and JRE versions 5.0 Update 9 and earlier, update to a version later than Update 9 to resolve the issue. For Sun SDK and JRE versions 1.4.2 14 and earlier, update to a version later than 1.4.2 14 to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2007-4381

RHSA-2007:0829

RHSA-2007:0956

RHSA-2007:1086

RHSA-2008:0100

RHSA-2008:0132

Produtos afetados

Jdk

Jre

Sdk

Referências · 32

• 🔥 https://exploit-db.com/exploits/30502 · Exploit
• http://gentoo.org/security/en/glsa/glsa-200709-15.xml · Aviso do Fabricante
• http://securitytracker.com/id?1018576 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10290 · Nota
• http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html · Aviso do Fabricante
• http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html · Nota
• http://securityfocus.com/bid/25340 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-4381 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2007-1086.html · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103024-1 · Aviso do Fabricante
• http://secunia.com/advisories/26402 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36061 · Nota
• http://redhat.com/support/errata/RHSA-2007-0956.html · Aviso do Fabricante
• http://secunia.com/advisories/29897 · Nota