Every CVE Search/ Get API key

CVE-2007-5689

The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through...

10.0 High

The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.

Exploit likelihood

4.89%Up 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.

Record
CVE-2007-5689
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.

Record
CVE-2007-5689
Updated
2026-11-02
EUVDEUVD-2007-5661 No score

The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.

Record
EUVD-2007-5661
Updated
2026-11-03
GitHub AdvisoriesGHSA-83vr-hv42-q4v5 No score

The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through...

The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.

Record
GHSA-83vr-hv42-q4v5
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
java-1.5.0-sun
Red Hat:rhel_extras:4
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el4
0:1.5.0.13-1jpp.1.el4
java-1.5.0-sun-demo
Red Hat:rhel_extras:4
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el4
0:1.5.0.13-1jpp.1.el4
java-1.5.0-sun-devel
Red Hat:rhel_extras:4
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el4
0:1.5.0.13-1jpp.1.el4
java-1.5.0-sun-jdbc
Red Hat:rhel_extras:4
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el4
0:1.5.0.13-1jpp.1.el4
java-1.5.0-sun-plugin
Red Hat:rhel_extras:4
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el4
0:1.5.0.13-1jpp.1.el4
java-1.5.0-sun-src
Red Hat:rhel_extras:4
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el4
0:1.5.0.13-1jpp.1.el4
java-1.5.0-sun
Red Hat:rhel_extras:5::client
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5
java-1.5.0-sun-demo
Red Hat:rhel_extras:5::client
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5
java-1.5.0-sun-devel
Red Hat:rhel_extras:5::client
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5
java-1.5.0-sun-jdbc
Red Hat:rhel_extras:5::client
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5
Show 8 moreShow less
Affected packages
PackageAffectedFixed
java-1.5.0-sun-plugin
Red Hat:rhel_extras:5::client
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5
java-1.5.0-sun-src
Red Hat:rhel_extras:5::client
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5
java-1.5.0-sun
Red Hat:rhel_extras:5::server
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5
java-1.5.0-sun-demo
Red Hat:rhel_extras:5::server
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5
java-1.5.0-sun-devel
Red Hat:rhel_extras:5::server
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5
java-1.5.0-sun-jdbc
Red Hat:rhel_extras:5::server
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5
java-1.5.0-sun-plugin
Red Hat:rhel_extras:5::server
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5
java-1.5.0-sun-src
Red Hat:rhel_extras:5::server
From an advisory covering 7 CVEs
 before 0:1.5.0.13-1jpp.1.el5
0:1.5.0.13-1jpp.1.el5

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-5689 is a high vulnerability (CVSS 10.0) in Sun Jdk, published October 29, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.89%, the 92nd percentile. No source names a fixed version.

References

Show 48 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open