PT-2007-6680 · Sun+1 · Sun Java Runtime Environment+3

Published 2007-10-29 · Updated 2018-10-30 · CVE-2007-5689

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Java Runtime Environment (JRE) versions 1.3.x through 1.3.1 20 Sun Java Runtime Environment (JRE) versions 1.4.x through 1.4.2 15 JDK and JRE 5.x through 5.0 Update 12 JDK and JRE 6.x through 6 Update 2

Description The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.

Recommendations For Sun Java Runtime Environment (JRE) versions 1.3.x through 1.3.1 20, update to a version later than 1.3.1 20. For Sun Java Runtime Environment (JRE) versions 1.4.x through 1.4.2 15, update to a version later than 1.4.2 15. For JDK and JRE 5.x through 5.0 Update 12, update to a version later than 5.0 Update 12. For JDK and JRE 6.x through 6 Update 2, update to a version later than 6 Update 2.

Fix

Related Identifiers

CVE-2007-5689

HPSBUX02284

RHSA-2007:0963

Affected Products

Hp-Ux

Jdk

Java Virtual Machine

Sun Java Runtime Environment

References · 34

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5273 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5239 · Security Note
• http://dev2dev.bea.com/pub/advisory/272 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200804-28.xml · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200806-11.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5238 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5689 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5237 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200804-20.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5236 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5274 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2007-5689 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5232 · Security Note
• http://secunia.com/advisories/27320 · Vendor Advisory