NVD

Id
55655  
Name
CVE-2007-3504  
Description
Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, for Windows allows remote attackers to perform unauthorized actions via an application that grants file overwrite privileges to itself. NOTE: this can be leveraged to execute arbitrary code by overwriting a .java.policy file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-06-29  
Modified Date
2012-10-30  
Seq
2007-3504  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
283046 55655 CVE-2007-3504 http://docs.info.apple.com/article.html?artnum=307177  View
283047 55655 CVE-2007-3504 APPLE-SA-2007-12-14  View
283048 55655 CVE-2007-3504 102957  View
283049 55655 CVE-2007-3504 20070702 High Risk Flaw in Sun"s Java Web Start  View
283050 55655 CVE-2007-3504 24695  View
283051 55655 CVE-2007-3504 1018328  View
283052 55655 CVE-2007-3504 ADV-2007-2384  View
283053 55655 CVE-2007-3504 ADV-2007-4224  View
283054 55655 CVE-2007-3504 javaweb-javapolicy-code-execution(35169)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52346 JVNDB-2007-001036 Sun JDK/JRE の Sun Java Web Start の PersistenceService におけるディレクトリトラバーサルの脆弱性 Sun JDK/JRE の Java Web Start における PersistenceService には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-3504 26859 CVE-2007-3504 55655 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001036.html 2007-06-28 2007-12-28 View