Vulnerabilities > SUN
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-10-06 | CVE-2007-5240 | Unspecified vulnerability in SUN Jdk, JRE and SDK Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen. | 5.0 |
| 2007-10-06 | CVE-2007-5239 | Permissions, Privileges, and Access Controls vulnerability in SUN Jdk, JRE and SDK Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications. | 4.0 |
| 2007-10-06 | CVE-2007-5238 | Permissions, Privileges, and Access Controls vulnerability in SUN Jdk, JRE and SDK Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information (the Java Web Start cache location) via an untrusted application, aka "three vulnerabilities." | 2.6 |
| 2007-10-06 | CVE-2007-5237 | Permissions, Privileges, and Access Controls vulnerability in SUN JDK and JRE Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read and modify local files via an untrusted application, aka "two vulnerabilities." | 7.1 |
| 2007-10-06 | CVE-2007-5236 | Permissions, Privileges, and Access Controls vulnerability in SUN Jdk, JRE and SDK Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application. | 5.4 |
| 2007-10-05 | CVE-2007-5232 | Unspecified vulnerability in SUN Jdk, JRE and SDK Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when applet caching is enabled, allows remote attackers to violate the security model for an applet's outbound connections via a DNS rebinding attack. | 4.0 |
| 2007-10-05 | CVE-2007-5225 | Numeric Errors vulnerability in SUN Sunos 5.10/5.8/5.9 Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the I_PEEK ioctl. | 4.9 |
| 2007-10-01 | CVE-2007-5170 | Permissions, Privileges, and Access Controls vulnerability in SUN Embedded Lights OUT Manager Unspecified vulnerability in the embedded service processor (SP) before 3.09 in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy. | 5.0 |
| 2007-10-01 | CVE-2007-5153 | Code Injection vulnerability in SUN products Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers to execute arbitrary code via unspecified vectors. | 6.8 |
| 2007-10-01 | CVE-2007-5152 | Improper Authentication vulnerability in SUN products Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a container restart, which allows remote attackers to perform administrative tasks. | 7.5 |