Vulnerabilities > SUN > SDK > 1.3.02

DATE CVE VULNERABILITY TITLE RISK
2007-05-02 CVE-2007-2435 Permissions, Privileges, and Access Controls vulnerability in SUN Java Enterprise System, JRE and SDK
Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.
network
low complexity
sun CWE-264
critical
10.0
2002-03-15 CVE-2002-0058 Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.
network
low complexity
microsoft sun
5.0