CVE-2007-5239 : Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications.

Published 2007-10-06 00:17:00

Updated 2018-10-30 16:26:24

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-5239

SUN » JDK » Version: 1.5.0 Update Update1
cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.5.0 Update Update3
cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.5.0 Update Update2
cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.5.0 Update Update4
cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.5.0 Update Update5
cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.5.0 Update Update7
cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.5.0 Update Update8
cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.5.0 Update Update9
cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.5.0 Update Update10
cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update1
cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.5.0 Update Update11
cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.5.0 Update Update12
cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 1.6.0 Update Update2
cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.3.0
cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.3.0 Update Update5
cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.3.1 Update Update1
cpe:2.3:a:sun:jre:1.3.1:update1:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.3.1 Update Update1a
cpe:2.3:a:sun:jre:1.3.1:update1a:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update4
cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update5
cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 3
cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update1
cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2
cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 1
cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 10
cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 8
cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 9
cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update2
cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update3
cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 12
cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 13
cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 11
cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 14
cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 15
cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.1 Update Update3
cpe:2.3:a:sun:jre:1.4.1:update3:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4
cpe:2.3:a:sun:jre:1.4:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update6
cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update8
cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update7
cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.3.1 Update Update16
cpe:2.3:a:sun:jre:1.3.1:update16:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update9
cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update10
cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 1
cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update11
cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.3.1 Update Update18
cpe:2.3:a:sun:jre:1.3.1:update18:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.3.1 Update Update19
cpe:2.3:a:sun:jre:1.3.1:update19:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.6.0 Update Update 2
cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.3.1 Update Update20
cpe:2.3:a:sun:jre:1.3.1:update20:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.5.0 Update Update12
cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.3.1 01
cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.3.1 01a
cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2
cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 03
cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 08
cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 09
cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.3.1 16
cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.3.1 18
cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 10
cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 11
cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 12
cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.3.1 19
cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 14
cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.3.1 20
cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 13
cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 15
cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2007-5239

Top countries where our scanners detected CVE-2007-5239

Top open port discovered on systems with this issue 80

IPs affected by CVE-2007-5239 719

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2007-5239!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2007-5239

EPSS FAQ

1.54%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 80 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-5239

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.0	MEDIUM	AV:N/AC:H/Au:N/C:P/I:P/A:N	4.9	4.9	NIST
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None

CWE ids for CVE-2007-5239

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-5239