Java Web Start BasicService displays local files in the browser
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Extras for RHEL 3 | |||
| java-1.4.2-ibm-0:1.4.2.13-1jpp.1.el3 | cpe:/a:redhat:rhel_extras:3 | RHSA-2009:0445 | 2009-04-23T00:00:00Z |
| Extras for RHEL 4 | |||
| java-1.6.0-sun-1:1.6.0.11-1jpp.1.el4 | cpe:/a:redhat:rhel_extras:4 | RHSA-2008:1018 | 2008-12-04T00:00:00Z |
| java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4 | cpe:/a:redhat:rhel_extras:4 | RHSA-2008:1025 | 2008-12-04T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4 | cpe:/a:redhat:rhel_extras:4 | RHSA-2009:0016 | 2009-01-13T00:00:00Z |
| java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el4 | cpe:/a:redhat:rhel_extras:4 | RHSA-2009:0369 | 2009-03-25T00:00:00Z |
| java-1.4.2-ibm-0:1.4.2.13-1jpp.1.el4 | cpe:/a:redhat:rhel_extras:4 | RHSA-2009:0445 | 2009-04-23T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 5 | |||
| java-1.6.0-sun-1:1.6.0.11-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2008:1018 | 2008-12-04T00:00:00Z |
| java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2008:1025 | 2008-12-04T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2009:0016 | 2009-01-13T00:00:00Z |
| java-1.6.0-ibm-1:1.6.0.4-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2009:0369 | 2009-03-25T00:00:00Z |
| java-1.4.2-ibm-0:1.4.2.13-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2009:0445 | 2009-04-23T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2008-5319 | Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668. |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 3.0% (3.013% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.