CVE-2007-5238

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does…

Low2.6EPSS 2.7%

Published: 6 Oct 2007
Updated: 7 Aug 2024
Reserved: 5 Oct 2007
Assigned by: mitre

Description

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information (the Java Web Start cache location) via an untrusted application, aka "three vulnerabilities."

Scores

CVSS scores of CVE-2007-5238, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	2.0	Low2.6	AV:N/AC:H/Au:N/C:P/I:N/A:N

EPSS (exploitation in 30 days): 2.7% · top 14% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.6.

Weakness

Affected products

n/a
- affected n/a

References (33)

RHSA-2008:0132 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2007:1041 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
ADV-2007-3895 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
30676 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
29042 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
27693 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html (opens in a new tab)x_refsource_CONFIRMx_transferred
SUSE-SA:2007:055 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
javaweb-cache-information-disclosure(36946) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
29897 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
27206 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
27804 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
GLSA-200804-28 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
HPSBUX02284 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
29858 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
RHSA-2007:0963 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
ADV-2008-0609 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
SUSE-SA:2008:025 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
27261 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
20071029 FLEA-2007-0061-1 sun-jre sun-jdk (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
28777 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
BEA08-198.00 (opens in a new tab)vendor-advisoryx_refsource_BEAx_transferred
30780 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
oval:org.mitre.oval:def:11592 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
25920 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
28880 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
27716 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
ADV-2008-1856 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
http://www.vmware.com/security/advisories/VMSA-2008-0010.html (opens in a new tab)x_refsource_CONFIRMx_transferred
103073 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
1018770 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
GLSA-200804-20 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
GLSA-200806-11 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2007-5238](https://trackcve.app/badge/CVE-2007-5238.svg)](https://trackcve.app/cve/CVE-2007-5238)

Record last updated 7 Aug 2024, 15:24 UTC.