PT-2007-6323 · Oracle+1 · Java Runtime Environment+1

Published 2007-10-06 · Updated 2018-10-30 · CVE-2007-5240

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Java Runtime Environment versions prior to 6 Update 3 Java Runtime Environment versions prior to 5.0 Update 13 Java Runtime Environment versions prior to 1.4.2 16 Java Runtime Environment versions prior to 1.3.1 21

Description: A visual truncation issue in the Java Runtime Environment allows remote attackers to bypass the display of the untrusted-code warning banner. This is achieved by creating a window that is larger than the workstation screen.

Recommendations: For versions prior to 6 Update 3, update to version 6 Update 3 or later to resolve the issue. For versions prior to 5.0 Update 13, update to version 5.0 Update 13 or later to resolve the issue. For versions prior to 1.4.2 16, update to version 1.4.2 16 or later to resolve the issue. For versions prior to 1.3.1 21, update to version 1.3.1 21 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-5240

HPSBUX02284

RHSA-2007:0963

RHSA-2007:1041

RHSA-2008:0100

RHSA-2008:0132

RHSA-2008:0156

Affected Products

Hp-Ux

Java Runtime Environment

References · 53

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5274 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5237 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5232 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5238 · Security Note
• http://redhat.com/support/errata/RHSA-2007-1041.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0963.html · Vendor Advisory
• http://dev2dev.bea.com/pub/advisory/272 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5236 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5239 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5689 · Security Note
• http://redhat.com/support/errata/RHSA-2008-0156.html · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200806-11.xml · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200804-20.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0132.html · Vendor Advisory