Patchwire CVEs, their patch status, and feeds to follow them

CVE-2007-5238

Fixed in a distro release EPSS 3%

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information (the Java Web Start cache location) via an untrusted application, aka "three vulnerabilities."

Published 2007-10-06 · CVE record · OSV

Products: sun jdk, sun jre, sun sdk

Distro releases

ReleasePackageFixed in
Red Hat rhel extras 3java-1.4.2-ibm0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 3java-1.4.2-ibm-demo0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 3java-1.4.2-ibm-devel0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 3java-1.4.2-ibm-jdbc0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 3java-1.4.2-ibm-plugin0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 3java-1.4.2-ibm-src0:1.4.2.10-1jpp.2.el3
Red Hat rhel extras 4java-1.4.2-ibm0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-demo0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-devel0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-javacomm0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-jdbc0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-plugin0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm-src0:1.4.2.10-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-demo1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-devel1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-javacomm1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-jdbc1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-plugin1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-src1:1.5.0.6-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-sun0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-demo0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-devel0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-jdbc0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-plugin0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-sun-src0:1.5.0.13-1jpp.1.el4
Red Hat rhel extras 5java-1.4.2-ibm0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-demo0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-devel0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-javacomm0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-jdbc0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-plugin0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.4.2-ibm-src0:1.4.2.10-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-accessibility1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-demo1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-devel1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-javacomm1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-jdbc1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-plugin1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-src1:1.5.0.6-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun0:1.5.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-demo0:1.5.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-devel0:1.5.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-jdbc0:1.5.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-plugin0:1.5.0.13-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-sun-src0:1.5.0.13-1jpp.1.el5