Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jdk | Sun | 1.5.0 | 1.5.0 |
| Jdk | Sun | 1.5.0 | 1.5.0 |
| Jdk | Sun | 1.5.0 | 1.5.0 |
| Jdk | Sun | 1.5.0 | 1.5.0 |
| Jdk | Sun | 1.5.0 | 1.5.0 |
| Jdk | Sun | 1.5.0 | 1.5.0 |
| Jdk | Sun | 1.5.0 | 1.5.0 |
| Jdk | Sun | 1.5.0 | 1.5.0 |
| Jdk | Sun | 1.5.0 | 1.5.0 |
| Jdk | Sun | 1.5.0 | 1.5.0 |
| Jdk | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.4.2 | 1.4.2 |
| Jre | Sun | 1.4.2_1 | 1.4.2_1 |
| Jre | Sun | 1.4.2_2 | 1.4.2_2 |
| Jre | Sun | 1.4.2_3 | 1.4.2_3 |
| Jre | Sun | 1.4.2_4 | 1.4.2_4 |
| Jre | Sun | 1.4.2_5 | 1.4.2_5 |
| Jre | Sun | 1.4.2_6 | 1.4.2_6 |
| Jre | Sun | 1.4.2_7 | 1.4.2_7 |
| Jre | Sun | 1.4.2_8 | 1.4.2_8 |
| Jre | Sun | 1.4.2_9 | 1.4.2_9 |
| Jre | Sun | 1.4.2_10 | 1.4.2_10 |
| Jre | Sun | 1.4.2_11 | 1.4.2_11 |
| Jre | Sun | 1.4.2_12 | 1.4.2_12 |
| Jre | Sun | 1.4.2_13 | 1.4.2_13 |
| Jre | Sun | 1.4.2_14 | 1.4.2_14 |
| Jre | Sun | 1.4.2_15 | 1.4.2_15 |
| Jre | Sun | 1.4.2_21 | 1.4.2_21 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Jre | Sun | 1.5.0 | 1.5.0 |
| Sdk | Sun | 1.4.2_03 | 1.4.2_03 |
| Sdk | Sun | 1.4.2_08 | 1.4.2_08 |
| Sdk | Sun | 1.4.2_09 | 1.4.2_09 |
| Sdk | Sun | 1.4.2_10 | 1.4.2_10 |
| Sdk | Sun | 1.4.2_11 | 1.4.2_11 |
| Sdk | Sun | 1.4.2_12 | 1.4.2_12 |
| Sdk | Sun | 1.4.2_13 | 1.4.2_13 |
| Sdk | Sun | 1.4.2_14 | 1.4.2_14 |
| Sdk | Sun | 1.4.2_15 | 1.4.2_15 |
| Sun-java5 | Ubuntu | dapper | * |
| Sun-java5 | Ubuntu | edgy | * |
| Sun-java5 | Ubuntu | feisty | * |
| Sun-java5 | Ubuntu | gutsy | * |
| Sun-java5 | Ubuntu | hardy | * |
| Sun-java5 | Ubuntu | intrepid | * |
| Sun-java5 | Ubuntu | jaunty | * |
| Sun-java5 | Ubuntu | upstream | * |