PT-2007-6319 · Sun+1 · Jdk+2

Published 2007-10-06 · Updated 2018-10-30 · CVE-2007-5236

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Sun JDK and JRE versions 5.0 Update 12 and earlier Sun JDK and JRE versions 1.4.2 15 and earlier

Description: The issue allows user-assisted remote attackers to read local files via an untrusted application due to improper enforcement of access restrictions for untrusted applications.

Recommendations: For Sun JDK and JRE versions 5.0 Update 12 and earlier, update to a version later than 5.0 Update 12 to resolve the issue. For Sun JDK and JRE versions 1.4.2 15 and earlier, update to a version later than 1.4.2 15 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-5236

HPSBUX02284

Affected Products

Hp-Ux

Jdk

Jre

References · 32

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5274 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5237 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5232 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5238 · Security Note
• http://dev2dev.bea.com/pub/advisory/272 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5236 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5239 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5689 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2007-5236 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5240 · Security Note
• http://novell.com/linux/security/advisories/2007_55_java.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5273 · Security Note
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMTIzNDUzMw%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Note