CVE-2007-3655
Fixed in a distro release EPSS 12%
Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file.
Products: sun jre
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 4 | java-1.5.0-ibm | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-demo | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-devel | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-javacomm | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-jdbc | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-plugin | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-ibm-src | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun | 0:1.5.0.12-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun-demo | 0:1.5.0.12-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun-devel | 0:1.5.0.12-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun-jdbc | 0:1.5.0.12-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun-plugin | 0:1.5.0.12-1jpp.2.el4 |
| Red Hat rhel extras 4 | java-1.5.0-sun-src | 0:1.5.0.12-1jpp.2.el4 |
| Red Hat rhel extras 5 | java-1.5.0-ibm | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-demo | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-devel | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-javacomm | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-jdbc | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-plugin | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat rhel extras 5 | java-1.5.0-ibm-src | 1:1.5.0.5-1jpp.0.1.el5 |