CVE-2007-5240

Applets or Applications are allowed to display an oversized window

Published Oct 6, 2007 CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed
Description
Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2007-5220 Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen.
References
Link Providers
http://dev2dev.bea.com/pub/advisory/272 cve-icon cve-icon
http://download.novell.com/Download?buildid=q5exhSqeBjA~ cve-icon cve-icon
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html cve-icon cve-icon
http://secunia.com/advisories/27206 cve-icon cve-icon
http://secunia.com/advisories/27261 cve-icon cve-icon
http://secunia.com/advisories/27693 cve-icon cve-icon
http://secunia.com/advisories/27716 cve-icon cve-icon
http://secunia.com/advisories/27804 cve-icon cve-icon
http://secunia.com/advisories/28777 cve-icon cve-icon
http://secunia.com/advisories/28880 cve-icon cve-icon
http://secunia.com/advisories/29042 cve-icon cve-icon
http://secunia.com/advisories/29214 cve-icon cve-icon
http://secunia.com/advisories/29340 cve-icon cve-icon
http://secunia.com/advisories/29858 cve-icon cve-icon
http://secunia.com/advisories/29897 cve-icon cve-icon
http://secunia.com/advisories/30676 cve-icon cve-icon
http://secunia.com/advisories/30780 cve-icon cve-icon
http://secunia.com/advisories/31580 cve-icon cve-icon
http://secunia.com/advisories/31586 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200804-28.xml cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103071-1 cve-icon cve-icon
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5033642.html cve-icon cve-icon
http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2007_55_java.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0963.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-1041.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0100.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0132.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0156.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/482926/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/25918 cve-icon cve-icon
http://www.securitytracker.com/id?1018769 cve-icon cve-icon
http://www.vmware.com/security/advisories/VMSA-2008-0010.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3895 cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0609 cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/1856/references cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/36942 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-5240 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10783 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-5240 cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:24 PM
Reserved
Oct 5, 2007, 12:00 AM
Status
Modified
Published
Oct 6, 2007, 12:17 AM
Modified
Jun 16, 2026, 10:45 PM
Severity
Moderate
Public date
Oct 3, 2007, 12:00 AM