CVE-2007-5240 — JDK vulnerability

5 documents5 sources

Severity

5.0MEDIUMNVD

EPSS

2.7%

top 14.19%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SUN JDK SUN JRE SUN SDK

Timeline

PublishedOct 6

Latest updateMay 1

Description

Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶NVDsun/jdk1.5.0, 1.6.0+1

▶NVDsun/jre17 versions+16

▶NVDsun/sdk16 versions+15

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

GHSA

GHSA-9xph-fqp4-xrxv: Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5↗2022-05-01

▶

CVEList

CVE-2007-5240: Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5↗2007-10-06

▶

📋Vendor Advisories

Red Hat

Applets or Applications are allowed to display an oversized window↗2007-10-03

▶

💬Community

Bugzilla

CVE-2007-5240 Applets or Applications are allowed to display an oversized window↗2007-10-07

▶