CVE-2007-3504: Path Traversal
Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.213 and earlier, for Windows allows remote attackers to perform unauthorized actions via an application that grants file overwrite privileges to itself. NOTE: this can be leveraged to execute arbitrary code by overwriting a .java.policy file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3504?
CVE-2007-3504 is classified as a moderate severity vulnerability due to its potential for unauthorized file operations.
How do I fix CVE-2007-3504?
To mitigate CVE-2007-3504, update to the latest versions of JDK and JRE that are not affected by this vulnerability.
Which versions are vulnerable to CVE-2007-3504?
CVE-2007-3504 affects JDK and JRE 5.0 Update 11 and earlier, as well as JRE 1.4.2_13 and earlier.
Can CVE-2007-3504 be exploited remotely?
Yes, CVE-2007-3504 can be exploited remotely by attackers to perform unauthorized file actions.
What software is affected by CVE-2007-3504?
The affected software includes Sun Java Web Start in specific versions of JDK, JRE, and SDK as outlined in the vulnerability details.