CVE Vulnerabilities

CVE-2007-5239

Published: Oct 06, 2007 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications.

Affected Software

Name Vendor Start Version End Version
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.5.0 1.5.0
Jdk Sun 1.6.0 1.6.0
Jdk Sun 1.6.0 1.6.0
Jre Sun 1.3.0 1.3.0
Jre Sun 1.3.0 1.3.0
Jre Sun 1.3.1 1.3.1
Jre Sun 1.3.1 1.3.1
Jre Sun 1.3.1 1.3.1
Jre Sun 1.3.1 1.3.1
Jre Sun 1.3.1 1.3.1
Jre Sun 1.3.1 1.3.1
Jre Sun 1.4 1.4
Jre Sun 1.4.1 1.4.1
Jre Sun 1.4.2 1.4.2
Jre Sun 1.4.2_1 1.4.2_1
Jre Sun 1.4.2_3 1.4.2_3
Jre Sun 1.4.2_8 1.4.2_8
Jre Sun 1.4.2_9 1.4.2_9
Jre Sun 1.4.2_10 1.4.2_10
Jre Sun 1.4.2_11 1.4.2_11
Jre Sun 1.4.2_12 1.4.2_12
Jre Sun 1.4.2_13 1.4.2_13
Jre Sun 1.4.2_14 1.4.2_14
Jre Sun 1.4.2_15 1.4.2_15
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.5.0 1.5.0
Jre Sun 1.6.0 1.6.0
Jre Sun 1.6.0 1.6.0
Sdk Sun 1.3.1_01 1.3.1_01
Sdk Sun 1.3.1_01a 1.3.1_01a
Sdk Sun 1.3.1_16 1.3.1_16
Sdk Sun 1.3.1_18 1.3.1_18
Sdk Sun 1.3.1_19 1.3.1_19
Sdk Sun 1.3.1_20 1.3.1_20
Sdk Sun 1.4.2 1.4.2
Sdk Sun 1.4.2_03 1.4.2_03
Sdk Sun 1.4.2_08 1.4.2_08
Sdk Sun 1.4.2_09 1.4.2_09
Sdk Sun 1.4.2_10 1.4.2_10
Sdk Sun 1.4.2_11 1.4.2_11
Sdk Sun 1.4.2_12 1.4.2_12
Sdk Sun 1.4.2_13 1.4.2_13
Sdk Sun 1.4.2_14 1.4.2_14
Sdk Sun 1.4.2_15 1.4.2_15
Extras for RHEL 3 RedHat java-1.4.2-bea-0:1.4.2.16-1jpp.1.el3 *
Extras for RHEL 3 RedHat java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3 *
Extras for RHEL 4 RedHat java-1.5.0-sun-0:1.5.0.13-1jpp.1.el4 *
Extras for RHEL 4 RedHat java-1.5.0-ibm-1:1.5.0.6-1jpp.2.el4 *
Extras for RHEL 4 RedHat java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4 *
Supplementary for Red Hat Enterprise Linux 5 RedHat java-1.5.0-sun-0:1.5.0.13-1jpp.1.el5 *
Supplementary for Red Hat Enterprise Linux 5 RedHat java-1.5.0-ibm-1:1.5.0.6-1jpp.1.el5 *
Supplementary for Red Hat Enterprise Linux 5 RedHat java-1.4.2-bea-0:1.4.2.16-1jpp.1.el5 *
Supplementary for Red Hat Enterprise Linux 5 RedHat java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el5 *
Supplementary for Red Hat Enterprise Linux 5 RedHat java-1.5.0-bea-0:1.5.0.14-1jpp.1.el5 *
Sun-java5 Ubuntu dapper *
Sun-java5 Ubuntu edgy *
Sun-java5 Ubuntu feisty *
Sun-java5 Ubuntu gutsy *
Sun-java5 Ubuntu hardy *
Sun-java5 Ubuntu intrepid *
Sun-java5 Ubuntu jaunty *
Sun-java5 Ubuntu upstream *
Sun-java6 Ubuntu devel *
Sun-java6 Ubuntu feisty *
Sun-java6 Ubuntu gutsy *
Sun-java6 Ubuntu hardy *
Sun-java6 Ubuntu intrepid *
Sun-java6 Ubuntu jaunty *
Sun-java6 Ubuntu karmic *
Sun-java6 Ubuntu upstream *

References