PT-2007-5562 · Sun · Sdk+2

Published 2007-08-17 · Updated 2017-09-29 · CVE-2007-4381

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun JDK and JRE versions 5.0 Update 9 and earlier Sun SDK and JRE versions 1.4.2 14 and earlier

Description The issue is related to an unspecified vulnerability in the font parsing implementation, which allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.

Recommendations For Sun JDK and JRE versions 5.0 Update 9 and earlier, update to a version later than Update 9 to resolve the issue. For Sun SDK and JRE versions 1.4.2 14 and earlier, update to a version later than 1.4.2 14 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2007-4381

RHSA-2007:0829

RHSA-2007:0956

RHSA-2007:1086

RHSA-2008:0100

RHSA-2008:0132

Affected Products

Jdk

Jre

Sdk

References · 32

• 🔥 https://exploit-db.com/exploits/30502 · Exploit
• http://gentoo.org/security/en/glsa/glsa-200709-15.xml · Vendor Advisory
• http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4381 · Security Note
• http://redhat.com/support/errata/RHSA-2007-1086.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103024-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0956.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0100.html · Vendor Advisory
• http://dev2dev.bea.com/pub/advisory/248 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0132.html · Vendor Advisory
• http://securitytracker.com/id?1018576 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10290 · Note
• http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html · Note
• http://securityfocus.com/bid/25340 · Note