Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Java | — | Upgrade to Apple Java version 1.4.2.16Upgrade to Apple Java version 1.5.0.13 | Jan 26, 2012 | Aug 17, 2007 |
| Gentoo Linux | — | Upgrade dev-java/jrockit-jdk-bin. | Oct 30, 2017 | Aug 17, 2007 |
| Suse | — | Upgrade java-1_4_2-ibm-pluginUpgrade java-1_4_2-ibm-jdbcUpgrade java-1_4_2-ibm | Feb 17, 2015 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub