Vulnerability Details CVE-2007-3504
Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, for Windows allows remote attackers to perform unauthorized actions via an application that grants file overwrite privileges to itself. NOTE: this can be leveraged to execute arbitrary code by overwriting a .java.policy file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.046
EPSS Ranking 88.6%
CVSS Severity
CVSS v2 Score 9.3
Products affected by CVE-2007-3504
-
-
-
-
-
-
-
Sun
»
Sdk
»
Version: 1.1.8_007
cpe:2.3:a:sun:sdk:1.1.8_007
-
Sun
»
Sdk
»
Version: 1.2.2_010
cpe:2.3:a:sun:sdk:1.2.2_010
-
cpe:2.3:a:sun:sdk:1.2.2_10
-
cpe:2.3:a:sun:sdk:1.2.2_14
-
-
cpe:2.3:a:sun:sdk:1.3.0_01
-
cpe:2.3:a:sun:sdk:1.3.0_02
-
cpe:2.3:a:sun:sdk:1.3.0_03
-
cpe:2.3:a:sun:sdk:1.3.0_04
-
cpe:2.3:a:sun:sdk:1.3.0_05
-
-
cpe:2.3:a:sun:sdk:1.3.1_01
-
Sun
»
Sdk
»
Version: 1.3.1_01a
cpe:2.3:a:sun:sdk:1.3.1_01a
-
cpe:2.3:a:sun:sdk:1.3.1_02
-
cpe:2.3:a:sun:sdk:1.3.1_03
-
cpe:2.3:a:sun:sdk:1.3.1_04
-
cpe:2.3:a:sun:sdk:1.3.1_05
-
cpe:2.3:a:sun:sdk:1.3.1_06
-
cpe:2.3:a:sun:sdk:1.3.1_07
-
cpe:2.3:a:sun:sdk:1.3.1_08
-
cpe:2.3:a:sun:sdk:1.3.1_09
-
cpe:2.3:a:sun:sdk:1.3.1_10
-
cpe:2.3:a:sun:sdk:1.3.1_11
-
cpe:2.3:a:sun:sdk:1.3.1_12
-
cpe:2.3:a:sun:sdk:1.3.1_13
-
cpe:2.3:a:sun:sdk:1.3.1_14
-
cpe:2.3:a:sun:sdk:1.3.1_15
-
cpe:2.3:a:sun:sdk:1.3.1_16
-
cpe:2.3:a:sun:sdk:1.3.1_17
-
cpe:2.3:a:sun:sdk:1.3.1_18
-
cpe:2.3:a:sun:sdk:1.3.1_19
-
cpe:2.3:a:sun:sdk:1.3.1_20
-
cpe:2.3:a:sun:sdk:1.3.1_21
-
cpe:2.3:a:sun:sdk:1.3.1_22
-
cpe:2.3:a:sun:sdk:1.3.1_23
-
cpe:2.3:a:sun:sdk:1.3.1_24
-
cpe:2.3:a:sun:sdk:1.3.1_25
-
cpe:2.3:a:sun:sdk:1.3.1_26
-
cpe:2.3:a:sun:sdk:1.3.1_27
-
cpe:2.3:a:sun:sdk:1.3.1_28
-
-
-
-
cpe:2.3:a:sun:sdk:1.4.0_01
-
cpe:2.3:a:sun:sdk:1.4.0_02
-
cpe:2.3:a:sun:sdk:1.4.0_03
-
cpe:2.3:a:sun:sdk:1.4.0_04
-
-
cpe:2.3:a:sun:sdk:1.4.1_02
-
cpe:2.3:a:sun:sdk:1.4.1_03
-
cpe:2.3:a:sun:sdk:1.4.1_04
-
cpe:2.3:a:sun:sdk:1.4.1_05
-
cpe:2.3:a:sun:sdk:1.4.1_06
-
cpe:2.3:a:sun:sdk:1.4.1_07
-
-
cpe:2.3:a:sun:sdk:1.4.2_01
-
cpe:2.3:a:sun:sdk:1.4.2_02
-
cpe:2.3:a:sun:sdk:1.4.2_03
-
cpe:2.3:a:sun:sdk:1.4.2_04
-
cpe:2.3:a:sun:sdk:1.4.2_05
-
cpe:2.3:a:sun:sdk:1.4.2_06
-
cpe:2.3:a:sun:sdk:1.4.2_07
-
cpe:2.3:a:sun:sdk:1.4.2_08
-
cpe:2.3:a:sun:sdk:1.4.2_09
-
cpe:2.3:a:sun:sdk:1.4.2_1
-
cpe:2.3:a:sun:sdk:1.4.2_10
-
cpe:2.3:a:sun:sdk:1.4.2_11
-
cpe:2.3:a:sun:sdk:1.4.2_12
-
cpe:2.3:a:sun:sdk:1.4.2_13
-
cpe:2.3:a:sun:sdk:1.4.2_2
-
cpe:2.3:a:sun:sdk:1.4.2_3
-
cpe:2.3:a:sun:sdk:1.4.2_4
-
cpe:2.3:a:sun:sdk:1.4.2_5
-
cpe:2.3:a:sun:sdk:1.4.2_6
-
cpe:2.3:a:sun:sdk:1.4.2_7
-
cpe:2.3:a:sun:sdk:1.4.2_8
-
cpe:2.3:a:sun:sdk:1.4.2_9
-
cpe:2.3:o:microsoft:windows:-
-
cpe:2.3:o:microsoft:windows:1.0
-
cpe:2.3:o:microsoft:windows:2.0
-
cpe:2.3:o:microsoft:windows:2000
-
cpe:2.3:o:microsoft:windows:3.0
-
cpe:2.3:o:microsoft:windows:3.1
-
cpe:2.3:o:microsoft:windows:3.11
-
cpe:2.3:o:microsoft:windows:server_2008
-
cpe:2.3:o:microsoft:windows:vista