NVD

Id
57315  
Name
CVE-2007-5239  
Description
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-10-05  
Modified Date
2011-03-07  
Seq
2007-5239  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292700 57315 CVE-2007-5239 BEA08-198.00  View
292701 57315 CVE-2007-5239 SSRT071483  View
292702 57315 CVE-2007-5239 SUSE-SA:2008:025  View
292703 57315 CVE-2007-5239 oval:org.mitre.oval:def:8758  View
292704 57315 CVE-2007-5239 GLSA-200804-28  View
292705 57315 CVE-2007-5239 1018814  View
292706 57315 CVE-2007-5239 103072  View
292707 57315 CVE-2007-5239 http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html  View
292708 57315 CVE-2007-5239 GLSA-200804-20  View
292709 57315 CVE-2007-5239 GLSA-200806-11  View
292710 57315 CVE-2007-5239 SUSE-SA:2007:055  View
292711 57315 CVE-2007-5239 RHSA-2007:0963  View
292712 57315 CVE-2007-5239 RHSA-2007:1041  View
292713 57315 CVE-2007-5239 RHSA-2008:0100  View
292714 57315 CVE-2007-5239 RHSA-2008:0132  View
292715 57315 CVE-2007-5239 RHSA-2008:0156  View
292716 57315 CVE-2007-5239 20071029 FLEA-2007-0061-1 sun-jre sun-jdk  View
292717 57315 CVE-2007-5239 http://www.vmware.com/security/advisories/VMSA-2008-0010.html  View
292718 57315 CVE-2007-5239 ADV-2007-3895  View
292719 57315 CVE-2007-5239 ADV-2008-0609  View
292720 57315 CVE-2007-5239 ADV-2008-1856  View
292721 57315 CVE-2007-5239 sun-java-dragdrop-weak-security(36950)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52074 JVNDB-2007-000737 Sun JDK/JRE の Java Web Start における不適切なアクセス制限の脆弱性 Java Web Start には、信頼されないアプリケーションやアプレットのアクセス制限に不備があり、ユーザに信頼されないアプリケーションやアプレットからデスクトップアプリケーションへドラッグアンドドロップさせることで、システム上の任意のファイルをコピーされたり、リネームされたりする脆弱性が存在します。 CVE-2007-5239 28594 CVE-2007-5239 57315 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000737.html 2007-10-03 2008-03-18 View