CVE

Id
26861  
CVE No.
CVE-2007-3504  
Status
Candidate  
Description
Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, for Windows allows remote attackers to perform unauthorized actions via an application that grants file overwrite privileges to itself. NOTE: this can be leveraged to execute arbitrary code by overwriting a .java.policy file.  
Phase
Assigned (20070629)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274059 26861 CVE-2007-3504 BUGTRAQ:20070702 High Risk Flaw in Sun"s Java Web Start  View
274060 26861 CVE-2007-3504 URL:http://www.securityfocus.com/archive/1/archive/1/472673/100/0/threaded  View
274061 26861 CVE-2007-3504 MISC:http://docs.info.apple.com/article.html?artnum=307177  View
274062 26861 CVE-2007-3504 APPLE:APPLE-SA-2007-12-14  View
274063 26861 CVE-2007-3504 URL:http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html  View
274064 26861 CVE-2007-3504 SUNALERT:102957  View
274065 26861 CVE-2007-3504 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102957-1  View
274066 26861 CVE-2007-3504 BID:24695  View
274067 26861 CVE-2007-3504 URL:http://www.securityfocus.com/bid/24695  View
274068 26861 CVE-2007-3504 OSVDB:37755  View
274069 26861 CVE-2007-3504 URL:http://osvdb.org/37755  View
274070 26861 CVE-2007-3504 VUPEN:ADV-2007-2384  View
274071 26861 CVE-2007-3504 URL:http://www.vupen.com/english/advisories/2007/2384  View
274072 26861 CVE-2007-3504 VUPEN:ADV-2007-4224  View
274073 26861 CVE-2007-3504 URL:http://www.vupen.com/english/advisories/2007/4224  View
274074 26861 CVE-2007-3504 SECTRACK:1018328  View
274075 26861 CVE-2007-3504 URL:http://www.securitytracker.com/id?1018328  View
274076 26861 CVE-2007-3504 SECUNIA:25823  View
274077 26861 CVE-2007-3504 URL:http://secunia.com/advisories/25823  View
274078 26861 CVE-2007-3504 SECUNIA:28115  View
274079 26861 CVE-2007-3504 URL:http://secunia.com/advisories/28115  View
274080 26861 CVE-2007-3504 XF:javaweb-javapolicy-code-execution(35169)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53571 JVNDB-2007-002263 FreeType の src/base/ftbimap.c におけるサービス運用妨害 (DoS) の脆弱性 FreeType の src/base/ftbimap.c の ft_bitmap_assure_buffer 関数は、"メモリバッファ上書きバグ" が存在するため、サービス運用妨害 (DoS) 状態となる、任意のコードを実行される脆弱性が存在します。 CVE-2007-3506 26861 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002263.html  View