CVE-2007-5689: Critical severity Java Development Kit (JDK) vulnerability
The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.120 and 1.4.x through 1.4.215, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5689?
CVE-2007-5689 has been classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2007-5689?
To fix CVE-2007-5689, it is recommended to update the Java Runtime Environment or the Java Development Kit to a version that has addressed this vulnerability.
What impact does CVE-2007-5689 have on affected software?
CVE-2007-5689 allows attackers to execute arbitrary programs or access and modify files on affected software, posing significant security risks.
Which versions are affected by CVE-2007-5689?
CVE-2007-5689 affects various versions of the Sun Java Runtime Environment and Java Development Kit, specifically versions 1.3.x through 1.6.x.
Are there workarounds for CVE-2007-5689 while I update?
While waiting to update, disabling the Java plugin in web browsers can mitigate the risk associated with CVE-2007-5689.