Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Java | — | Upgrade to Apple Java version 1.5.0.13Upgrade to Apple Java version 1.4.2.16 | Jan 26, 2012 | Aug 17, 2007 |
| Gentoo Linux | — | Upgrade dev-java/jrockit-jdk-bin. | Oct 30, 2017 | Aug 17, 2007 |
| Suse | — | Upgrade java-1_4_2-ibmUpgrade java-1_4_2-ibm-jdbcUpgrade java-1_4_2-ibm-plugin | Feb 17, 2015 | Jul 9, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub