CVE - CVE-2007-2435

CVE-ID
CVE-2007-2435	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:http://docs.info.apple.com/article.html?artnum=307177 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2007-199.htm APPLE:APPLE-SA-2007-12-14 URL:http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html BEA:BEA07-173.00 URL:http://dev2dev.bea.com/pub/advisory/241 GENTOO:GLSA-200705-23 URL:http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml GENTOO:GLSA-200706-08 URL:http://security.gentoo.org/glsa/glsa-200706-08.xml GENTOO:GLSA-200804-20 URL:http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml GENTOO:GLSA-200804-28 URL:http://security.gentoo.org/glsa/glsa-200804-28.xml GENTOO:GLSA-200806-11 URL:http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml REDHAT:RHSA-2007:0817 URL:http://www.redhat.com/support/errata/RHSA-2007-0817.html REDHAT:RHSA-2007:0829 URL:http://www.redhat.com/support/errata/RHSA-2007-0829.html REDHAT:RHSA-2008:0261 URL:http://www.redhat.com/support/errata/RHSA-2008-0261.html SUNALERT:102881 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102881-1 BID:23728 URL:http://www.securityfocus.com/bid/23728 OSVDB:35483 URL:http://osvdb.org/35483 OVAL:oval:org.mitre.oval:def:10999 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10999 VUPEN:ADV-2007-1598 URL:http://www.vupen.com/english/advisories/2007/1598 VUPEN:ADV-2007-1814 URL:http://www.vupen.com/english/advisories/2007/1814 VUPEN:ADV-2007-4224 URL:http://www.vupen.com/english/advisories/2007/4224 SECTRACK:1017986 URL:http://www.securitytracker.com/id?1017986 SECUNIA:25069 URL:http://secunia.com/advisories/25069 SECUNIA:25283 URL:http://secunia.com/advisories/25283 SECUNIA:25413 URL:http://secunia.com/advisories/25413 SECUNIA:25474 URL:http://secunia.com/advisories/25474 SECUNIA:25832 URL:http://secunia.com/advisories/25832 SECUNIA:26311 URL:http://secunia.com/advisories/26311 SECUNIA:26369 URL:http://secunia.com/advisories/26369 SECUNIA:28115 URL:http://secunia.com/advisories/28115 SECUNIA:29858 URL:http://secunia.com/advisories/29858 SECUNIA:30780 URL:http://secunia.com/advisories/30780 XF:javawebstart-classes-privilege-escalation(33984) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/33984
Assigning CNA
N/A
Date Entry Created
20070501	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070501)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org