Back to search
CVE-2007-2435
Published: May 2, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://docs.info.apple.com/article.html?artnum=307177
x_refsource_MISC
BEA07-173.00
vendor-advisory
x_refsource_BEA
23728
vdb-entry
x_refsource_BID
ADV-2007-1814
vdb-entry
x_refsource_VUPEN
26311
third-party-advisory
x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2007-199.htm
x_refsource_CONFIRM
25283
third-party-advisory
x_refsource_SECUNIA
35483
vdb-entry
x_refsource_OSVDB
GLSA-200705-23
vendor-advisory
x_refsource_GENTOO
ADV-2007-1598
vdb-entry
x_refsource_VUPEN
26369
third-party-advisory
x_refsource_SECUNIA
25413
third-party-advisory
x_refsource_SECUNIA
GLSA-200804-28
vendor-advisory
x_refsource_GENTOO
29858
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2007-12-14
vendor-advisory
x_refsource_APPLE
RHSA-2007:0817
vendor-advisory
x_refsource_REDHAT
25832
third-party-advisory
x_refsource_SECUNIA
ADV-2007-4224
vdb-entry
x_refsource_VUPEN
GLSA-200706-08
vendor-advisory
x_refsource_GENTOO
102881
vendor-advisory
x_refsource_SUNALERT
javawebstart-classes-privilege-escalation(33984)
vdb-entry
x_refsource_XF
30780
third-party-advisory
x_refsource_SECUNIA
1017986
vdb-entry
x_refsource_SECTRACK
25069
third-party-advisory
x_refsource_SECUNIA
28115
third-party-advisory
x_refsource_SECUNIA
RHSA-2008:0261
vendor-advisory
x_refsource_REDHAT
25474
third-party-advisory
x_refsource_SECUNIA
GLSA-200804-20
vendor-advisory
x_refsource_GENTOO
GLSA-200806-11
vendor-advisory
x_refsource_GENTOO
oval:org.mitre.oval:def:10999
vdb-entry
signature
x_refsource_OVAL
RHSA-2007:0829
vendor-advisory
x_refsource_REDHAT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now