NVD

Id
57312  
Name
CVE-2007-5236  
Description
Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application.  
Reject
 
CVSS Version
2  
CVSS Score
5.4  
Severity
Medium  
CVSS Base Score
5.4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-10-05  
Modified Date
2011-03-07  
Seq
2007-5236  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292651 57312 CVE-2007-5236 BEA08-198.00  View
292652 57312 CVE-2007-5236 SSRT071483  View
292653 57312 CVE-2007-5236 SUSE-SA:2008:025  View
292654 57312 CVE-2007-5236 oval:org.mitre.oval:def:6115  View
292655 57312 CVE-2007-5236 103073  View
292656 57312 CVE-2007-5236 http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html  View
292657 57312 CVE-2007-5236 SUSE-SA:2007:055  View
292658 57312 CVE-2007-5236 25920  View
292659 57312 CVE-2007-5236 http://www.vmware.com/security/advisories/VMSA-2008-0010.html  View
292660 57312 CVE-2007-5236 ADV-2007-3895  View
292661 57312 CVE-2007-5236 ADV-2008-0609  View
292662 57312 CVE-2007-5236 ADV-2008-1856  View
292663 57312 CVE-2007-5236 javaweb-cache-information-disclosure(36946)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52071 JVNDB-2007-000734 Sun Java Web Start における信頼されないアプリケーションのアクセス制限を適切に行わない脆弱性 Windows で動作をする JDK/JRE 及び SDK/JRE の Java Web Start には、信頼されないアプリケーションのアクセス制限が適切に行われない脆弱性が存在します。 CVE-2007-5236 28591 CVE-2007-5236 57312 5.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000734.html 2007-10-03 2008-03-04 View