PT-2007-6319 · Sun+1 · Jdk+2

Publicado 2007-10-06 · Atualizado 2018-10-30 · CVE-2007-5236

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:N/AC:H/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Sun JDK and JRE versions 5.0 Update 12 and earlier Sun JDK and JRE versions 1.4.2 15 and earlier

Description: The issue allows user-assisted remote attackers to read local files via an untrusted application due to improper enforcement of access restrictions for untrusted applications.

Recommendations: For Sun JDK and JRE versions 5.0 Update 12 and earlier, update to a version later than 5.0 Update 12 to resolve the issue. For Sun JDK and JRE versions 1.4.2 15 and earlier, update to a version later than 1.4.2 15 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5236

HPSBUX02284

Produtos afetados

Hp-Ux

Jdk

Jre

Referências · 32

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5274 · Nota de Segurança
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMTIzNDUzMw%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5237 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5236 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5232 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5238 · Nota de Segurança
• http://secunia.com/advisories/29897 · Nota
• http://vupen.com/english/advisories/2008/1856/references · Nota
• http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html · Nota
• http://dev2dev.bea.com/pub/advisory/272 · Aviso do Fabricante
• http://secunia.com/advisories/27716 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5236 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5239 · Nota de Segurança
• http://vupen.com/english/advisories/2007/3895 · Nota
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 · Aviso do Fabricante