« Volver al listado

CVE-2007-5019

Estado: ModificadaAlta (10)—

Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

SUN — Java WEB StartSUN — JRESUN — SDK

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-5019",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-09-20T21:17:00.000",
  "references": [
    {
      "url": "http://osvdb.org/38297",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/25734",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36682",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.exploit-db.com/exploits/4432",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/38297",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/25734",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36682",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.exploit-db.com/exploits/4432",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en el control ActiveX Sun Java Web Start del Java Runtime Environment (JRE) 1.6.0_X  permite a atacantes remotos tener un impacto desconocido a través del uso de un argumento largo en el método dnsResolve (isInstalled.dnsResolve)"
    }
  ],
  "lastModified": "2026-06-16T22:45:17.963",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:java_web_start:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "220CA362-5E47-4FCC-8645-E717C38AEE68"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0_0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F9AEA13-26CF-489D-BE9C-3BF576153D59"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0_10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23F1ED03-A83E-4F0E-A82A-D1A02290F594"
            },
            {
              "criteria": "cpe:2.3:a:sun:sdk:1.3.0:*:standard:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7245F1F2-E015-4421-BB10-8466DD2225C7"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}