1.3.1.24

DATE	CVE	VULNERABILITY TITLE	RISK
2007-06-30	CVE-2007-3504	Path Traversal vulnerability in SUN Jdk, JRE and SDK Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, for Windows allows remote attackers to perform unauthorized actions via an application that grants file overwrite privileges to itself. network microsoft sun CWE-22 critical	9.3
2007-05-02	CVE-2007-2435	Permissions, Privileges, and Access Controls vulnerability in SUN Java Enterprise System, JRE and SDK Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files. network low complexity sun CWE-264 critical	10.0