PT-2007-6125 · Oracle · Java Web Start+1

Yag Kohha · Publicado 2007-09-20 · Atualizado 2017-09-29 · CVE-2007-5019

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (JRE) version 1.6.0 X

Description The issue is related to a buffer overflow in the Sun Java Web Start ActiveX control. This occurs when a long argument is passed to the dnsResolve method, potentially allowing remote attackers to have an unknown impact.

Recommendations For Java Runtime Environment (JRE) version 1.6.0 X, consider restricting access to the dnsResolve method as a temporary workaround until a patch is available.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-5019

Produtos afetados

Java Runtime Environment

Java Web Start

Referências · 6

• 🔥 http://securityfocus.com/bid/25734 · Exploit
• 🔥 https://exploit-db.com/exploits/4432 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5019 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36682 · Nota
• http://osvdb.org/38297 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5019 · Nota