CVE-2007-0243
medium · 6.8Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.
6.8
CVSS
11.3%
EPSS (exploit prob.)
96th
EPSS percentile
2007-01-17
Published
AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sun | jdk | <= 1.5.0 |
| sun | jdk | 1.5.0 |
| sun | jdk | 1.5.0 |
| sun | jdk | 1.5.0 |
| sun | jdk | 1.5.0 |
| sun | jdk | 1.5.0 |
| sun | jre | <= 1.3.1 |
| sun | jre | 1.3.1 |
| sun | jre | 1.4.2_1 |
| sun | jre | 1.4.2_2 |
| sun | jre | 1.4.2_3 |
| sun | jre | 1.4.2_4 |
| sun | jre | 1.4.2_5 |
| sun | jre | 1.4.2_6 |
| sun | jre | 1.4.2_7 |
| sun | jre | 1.4.2_8 |
| sun | jre | 1.4.2_9 |
| sun | jre | 1.4.2_10 |
| sun | jre | 1.4.2_11 |
| sun | jre | 1.4.2_12 |
| sun | jre | 1.5.0 |
| sun | jre | 1.5.0 |
| sun | jre | 1.5.0 |
| sun | jre | 1.5.0 |
| sun | jre | 1.5.0 |
| sun | jre | 1.5.0 |
| sun | jre | 1.5.0 |
| sun | sdk | 1.3.1_01 |
| sun | sdk | 1.3.1_01a |
| sun | sdk | 1.3.1_16 |
| sun | sdk | 1.3.1_18 |
| sun | sdk | 1.4.2 |
| sun | sdk | 1.4.2_03 |
| sun | sdk | 1.4.2_08 |
| sun | sdk | 1.4.2_09 |
| sun | sdk | 1.4.2_10 |
| sun | sdk | 1.4.2_12 |
Check a specific version with /api/v1/cve/match.
References
- http://dev2dev.bea.com/pub/advisory/242
- http://docs.info.apple.com/article.html?artnum=307177
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579
- http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
- http://osvdb.org/32834
- http://secunia.com/advisories/23757
- http://secunia.com/advisories/24189
- http://secunia.com/advisories/24202
- http://secunia.com/advisories/24468
- http://secunia.com/advisories/24993
- http://secunia.com/advisories/25283
- http://secunia.com/advisories/26049
- http://secunia.com/advisories/26119
- http://secunia.com/advisories/26645
- http://secunia.com/advisories/27203
- http://secunia.com/advisories/28115
- http://security.gentoo.org/glsa/glsa-200702-08.xml
- http://securityreason.com/securityalert/2158
- http://securitytracker.com/id?1017520
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102760-1
- http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html
- http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html
- http://www.gentoo.org/security/en/glsa/glsa-200702-07.xml
- http://www.kb.cert.org/vuls/id/388289
- http://www.novell.com/linux/security/advisories/2007_45_java.html
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-0243