PT-2007-6322 · Sun+1 · Java Web Start+1

Publicado 2007-10-06 · Atualizado 2018-10-30 · CVE-2007-5239

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Java Web Start in Sun JDK and JRE versions 6 Update 2 and earlier Java Web Start in Sun JDK and JRE versions 5.0 Update 12 and earlier Java Web Start in Sun SDK and JRE versions 1.4.2 15 and earlier Java Web Start in Sun SDK and JRE versions 1.3.1 20 and earlier

Description: The issue allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from an untrusted application or applet window onto certain types of desktop applications. This occurs because Java Web Start does not properly enforce access restrictions for untrusted applications and applets.

Recommendations: For Java Web Start in Sun JDK and JRE versions 6 Update 2 and earlier, update to a version later than 6 Update 2. For Java Web Start in Sun JDK and JRE versions 5.0 Update 12 and earlier, update to a version later than 5.0 Update 12. For Java Web Start in Sun SDK and JRE versions 1.4.2 15 and earlier, update to a version later than 1.4.2 15. For Java Web Start in Sun SDK and JRE versions 1.3.1 20 and earlier, update to a version later than 1.3.1 20.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5239

HPSBUX02284

RHSA-2007:0963

RHSA-2007:1041

RHSA-2008:0100

RHSA-2008:0132

RHSA-2008:0156

Produtos afetados

Hp-Ux

Java Web Start

Referências · 48

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5274 · Nota de Segurança
• http://secunia.com/advisories/27206 · Nota
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMTIzNDUzMw%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5237 · Nota de Segurança
• http://secunia.com/advisories/29340 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5232 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5238 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2007-1041.html · Aviso do Fabricante
• http://secunia.com/advisories/29897 · Nota
• http://securitytracker.com/id?1018814 · Nota
• http://vupen.com/english/advisories/2008/1856/references · Nota
• http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html · Nota
• http://redhat.com/support/errata/RHSA-2007-0963.html · Aviso do Fabricante
• http://dev2dev.bea.com/pub/advisory/272 · Aviso do Fabricante
• http://secunia.com/advisories/27716 · Nota