CVE-2007-3716: Input Validation

Q: What is the severity of CVE-2007-3716?

CVE-2007-3716 has a severity rating that allows context-dependent attackers to execute arbitrary code, making it a significant security risk.

Q: How do I fix CVE-2007-3716?

To fix CVE-2007-3716, update the Sun JDK or JRE to version 6 Update 2 or later.

Q: What software is affected by CVE-2007-3716?

CVE-2007-3716 affects Sun JDK and JRE version 6 before Update 2.

Q: What is the impact of CVE-2007-3716?

The impact of CVE-2007-3716 includes the potential for arbitrary code execution through a crafted XSLT stylesheet.

Q: Are there any related vulnerabilities to CVE-2007-3716?

Yes, CVE-2007-3716 is related to CVE-2007-3715, as both involve issues with processing XML signatures.

Published Jul 11, 2007

Updated

The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715.

Affected Software

2 affected components

Java Development Kit (JDK)<=6

Sun Java Runtime Environment (JRE)<=6

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102993-1

Event History

Jul 11, 2007

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3716?

CVE-2007-3716 has a severity rating that allows context-dependent attackers to execute arbitrary code, making it a significant security risk.

How do I fix CVE-2007-3716?