CVE-2007-5236
Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier...
Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application.
Exploit likelihood
What each source reports
NVD Score used
Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application.
- Record
CVE-2007-5236- CVSS 2.0
- 5.4 Medium
AV:N/AC:H/Au:N/C:C/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application.
- Record
CVE-2007-5236- Updated
- 2026-11-02
EUVDEUVD-2007-5216 No score
Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application.
- Record
EUVD-2007-5216- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-64rq-46g4-hjmc No score
Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier...
Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application.
- Record
GHSA-64rq-46g4-hjmc- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5236 is a medium vulnerability (CVSS 5.4) in Sun Jdk, published October 6, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.98%, the 87th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2007/3895
secunia.com/advisories/30676
support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html
novell.com/linux/security/advisories/2007_55_java.html
Show 16 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/36946
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6115
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533
lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
dev2dev.bea.com/pub/advisory/272
securityfocus.com/bid/25920
vmware.com/security/advisories/VMSA-2008-0010.html
sunsolve.sun.com/search/document.do?assetkey=1-26-103073-1
nvd.nist.gov/vuln/detail/CVE-2007-5236
github.com/advisories/GHSA-64rq-46g4-hjmc