CVE-2007-4381

published 2007-08-17

CVE-2007-4381: Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote…

critical 9.3 CVSS 3.1

AV N AC M Au N C C I C A C

EXPLOIT

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
sun	jdk	<= 1.5.0	—
sun	jre	<= 1.4.2	—
sun	sdk	<= 1.4.2_14	—