CVE-2007-5237
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access...
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read and modify local files via an untrusted application, aka "two vulnerabilities."
Exploit likelihood
What each source reports
NVD Score used
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read and modify local files via an untrusted application, aka "two vulnerabilities."
- Record
CVE-2007-5237- CVSS 2.0
- 7.1 High
AV:N/AC:H/Au:N/C:C/I:C/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read and modify local files via an untrusted application, aka "two vulnerabilities."
- Record
CVE-2007-5237- Updated
- 2026-11-02
EUVDEUVD-2007-5217 No score
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read and modify local files via an untrusted application, aka "two vulnerabilities."
- Record
EUVD-2007-5217- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wxff-hq7w-p8h7 No score
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access...
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read and modify local files via an untrusted application, aka "two vulnerabilities."
- Record
GHSA-wxff-hq7w-p8h7- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5237 is a high vulnerability (CVSS 7.1) in Sun Jdk, published October 6, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.29%, the 88th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2007/3895
secunia.com/advisories/30676
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5899
novell.com/linux/security/advisories/2007_55_java.html
Show 17 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/36946
security.gentoo.org/glsa/glsa-200804-28.xml
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533
dev2dev.bea.com/pub/advisory/272
securityfocus.com/bid/25920
vmware.com/security/advisories/VMSA-2008-0010.html
sunsolve.sun.com/search/document.do?assetkey=1-26-103073-1
securitytracker.com/id?1018770
gentoo.org/security/en/glsa/glsa-200804-20.xml
nvd.nist.gov/vuln/detail/CVE-2007-5237
github.com/advisories/GHSA-wxff-hq7w-p8h7