National Cyber Awareness System

Vulnerability Summary for CVE-2007-4381

Overview

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.

Description

Additional information regarding this CVE can be found at SecurityFocus: http://www.securityfocus.com/bid/25340

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2007-4224

Hyperlink:http://www.vupen.com/english/advisories/2007/4224

External Source: VUPEN

Name: ADV-2007-3009

Hyperlink:http://www.vupen.com/english/advisories/2007/3009

External Source: VUPEN

Name: ADV-2007-2910

Hyperlink:http://www.vupen.com/english/advisories/2007/2910

External Source: SUNALERT

Name: 103024

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-103024-1

External Source: OVAL

Name: oval:org.mitre.oval:def:10290

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10290

External Source: XF

Name: sun-java-font-privilege-escalation(36061)

Hyperlink:http://xforce.iss.net/xforce/xfdb/36061

External Source: SECTRACK

Name: 1018576

Hyperlink:http://www.securitytracker.com/id?1018576

External Source: BID

Name: 25340

Hyperlink:http://www.securityfocus.com/bid/25340

External Source: REDHAT

Name: RHSA-2008:0132

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0132.html

External Source: REDHAT

Name: RHSA-2008:0100

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0100.html

External Source: REDHAT

Name: RHSA-2007:1086

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-1086.html

External Source: REDHAT

Name: RHSA-2007:0956

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0956.html

External Source: GENTOO

Name: GLSA-200709-15

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml

External Source: CONFIRM

Name: http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html

Hyperlink:http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html

External Source: SECUNIA

Name: 29897

Hyperlink:http://secunia.com/advisories/29897

External Source: SECUNIA

Name: 29340

Hyperlink:http://secunia.com/advisories/29340

External Source: SECUNIA

Name: 28880

Hyperlink:http://secunia.com/advisories/28880

External Source: SECUNIA

Name: 28777

Hyperlink:http://secunia.com/advisories/28777

External Source: SECUNIA

Name: 28115

Hyperlink:http://secunia.com/advisories/28115

External Source: SECUNIA

Name: 28056

Hyperlink:http://secunia.com/advisories/28056

External Source: SECUNIA

Name: 27716

Hyperlink:http://secunia.com/advisories/27716

External Source: SECUNIA

Name: 27203

Hyperlink:http://secunia.com/advisories/27203

External Source: SECUNIA

Name: 26933

Hyperlink:http://secunia.com/advisories/26933

External Source: SECUNIA

Name: 26631

Hyperlink:http://secunia.com/advisories/26631

External Source: SECUNIA

Name: 26402

Hyperlink:http://secunia.com/advisories/26402

External Source: SUSE

Name: SUSE-SA:2008:025

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html

External Source: APPLE

Name: APPLE-SA-2007-12-14

Hyperlink:http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html

External Source: MISC

Name: http://docs.info.apple.com/article.html?artnum=307177

Hyperlink:http://docs.info.apple.com/article.html?artnum=307177

External Source: BEA

Name: BEA07-177.00

Hyperlink:http://dev2dev.bea.com/pub/advisory/248

References to Check Content

Identifier:oval:org.mitre.oval:def:10290

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10290