NVD

Id
57314  
Name
CVE-2007-5238  
Description
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information (the Java Web Start cache location) via an untrusted application, aka "three vulnerabilities."  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-10-05  
Modified Date
2011-03-07  
Seq
2007-5238  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292679 57314 CVE-2007-5238 BEA08-198.00  View
292680 57314 CVE-2007-5238 SSRT071483  View
292681 57314 CVE-2007-5238 SUSE-SA:2008:025  View
292682 57314 CVE-2007-5238 oval:org.mitre.oval:def:11592  View
292683 57314 CVE-2007-5238 GLSA-200804-28  View
292684 57314 CVE-2007-5238 103073  View
292685 57314 CVE-2007-5238 http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html  View
292686 57314 CVE-2007-5238 GLSA-200804-20  View
292687 57314 CVE-2007-5238 GLSA-200806-11  View
292688 57314 CVE-2007-5238 SUSE-SA:2007:055  View
292689 57314 CVE-2007-5238 RHSA-2007:0963  View
292690 57314 CVE-2007-5238 RHSA-2007:1041  View
292691 57314 CVE-2007-5238 RHSA-2008:0132  View
292692 57314 CVE-2007-5238 20071029 FLEA-2007-0061-1 sun-jre sun-jdk  View
292693 57314 CVE-2007-5238 25920  View
292694 57314 CVE-2007-5238 1018770  View
292695 57314 CVE-2007-5238 http://www.vmware.com/security/advisories/VMSA-2008-0010.html  View
292696 57314 CVE-2007-5238 ADV-2007-3895  View
292697 57314 CVE-2007-5238 ADV-2008-0609  View
292698 57314 CVE-2007-5238 ADV-2008-1856  View
292699 57314 CVE-2007-5238 javaweb-cache-information-disclosure(36946)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52070 JVNDB-2007-000733 Sun Java Web Start における信頼されないアプリケーションのアクセス制限を適切に行わない三つの脆弱性 JDK および JRE の Java Web Start には信頼されないアプリケーションのアクセス制限が適切に行われない三つの脆弱性が存在します。 CVE-2007-5238 28593 CVE-2007-5238 57314 5.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000733.html 2007-10-03 2008-03-04 View